Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connection can be made, which allows remote attackers to conduct port scanning attacks via a host name and port in the cms parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SAP BusinessObjects Explorer 安全漏洞
Vulnerability Description
SAP BusinessObjects Explorer是德国思爱普（SAP）公司的一套商务智能软件和企业绩效解决方案。该方案提供报表、绩效管理和数据基础等功能。 SAP BusinessObjects Explorer 14.0.5 build 882版本的polestar_xml.jsp脚本中存在安全漏洞，该漏洞源于程序没有正确验证用户定义输入的参数CMS名称。远程攻击者可借助‘cms’参数中的主机名和端口利用该漏洞实施端口扫描攻击。
CVSS Information
N/A
Vulnerability Type
N/A