CVE-2014-8316: Medium severity sap businessobjects vulnerability
XML External Entity (XXE) vulnerability in polestarxml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 allows remote attackers to read arbitrary files via the xmlParameter parameter in an explorationSpaceUpdate request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8316?
CVE-2014-8316 is considered a high severity vulnerability due to its potential to allow remote attackers to read sensitive files on the server.
How do I fix CVE-2014-8316?
To fix CVE-2014-8316, update SAP BusinessObjects Explorer to the latest version that addresses this XML External Entity vulnerability.
What kind of attack can exploit CVE-2014-8316?
CVE-2014-8316 can be exploited via an XML External Entity (XXE) attack that allows reading of arbitrary files from the server.
Which versions of SAP BusinessObjects Explorer are affected by CVE-2014-8316?
SAP BusinessObjects Explorer version 14.0.5 is affected by CVE-2014-8316, making it vulnerable to XXE attacks.
What impact does CVE-2014-8316 have on my system?
The impact of CVE-2014-8316 can include unauthorized access to sensitive files on the server, leading to potential data leaks.