Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2014-8592

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

SAP NetWeaver是德国思爱普(SAP)公司的一套面向服务的集成化应用平台,它可为SAP应用提供开发和运行环境。SAP Host Agent是一个主机代理,它提供数据库监控和管理、操作系统监控以及软件生命周期托管等功能。 SAP NetWeaver 7.02版本和7.3版本中使用的SAP Host Agent中存在安全漏洞。远程攻击者可利用该漏洞造成拒绝服务(进程终止)。

AI Predicted 7.5 Difficulty: Easy EPSS 2.12% · P80
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2014-8592

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Unspecified vulnerability in SAP Host Agent, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service (process termination) via a crafted request.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
SAP Host Agent 拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SAP NetWeaver是德国思爱普(SAP)公司的一套面向服务的集成化应用平台,它可为SAP应用提供开发和运行环境。SAP Host Agent是一个主机代理,它提供数据库监控和管理、操作系统监控以及软件生命周期托管等功能。 SAP NetWeaver 7.02版本和7.3版本中使用的SAP Host Agent中存在安全漏洞。远程攻击者可利用该漏洞造成拒绝服务(进程终止)。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2014-8592

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2014-8592

登录查看更多情报信息。

Security Blog Posts for CVE-2014-8592 (2)

Other References for CVE-2014-8592 (7)

Same Patch Batch · n/a · 2014-11-04 · 46 CVEs total

CVE-2013-7057 Axway SecureTransport 跨站请求伪造漏洞
CVE-2014-8339 Nuevolab Nuevoplayer for ClipShare SQL注入漏洞
CVE-2014-8585 WordPress Download Manager插件目录遍历漏洞
CVE-2014-8588 SAP HANA SQL注入漏洞
CVE-2014-8589 SAP Network Interface Router 整数溢出漏洞
CVE-2014-8590 SAP NetWeaver Application Server Java XML外部实体漏洞
CVE-2014-8591 SAP Internet Communication Manager 拒绝服务漏洞
CVE-2014-4311 Epicor Enterprise 信息泄露漏洞
CVE-2014-8587 多款SAP产品安全漏洞
CVE-2014-5387 EllisLab ExpressionEngine SQL注入漏洞
CVE-2014-7176 Enalean Tuleap SQL注入漏洞
CVE-2014-8593 Allomani Weblinks 跨站脚本漏洞
CVE-2014-4974 ESET Personal Firewall NDIS filter内核模式驱动程序信息泄露漏洞
CVE-2014-3660 Libxml2 拒绝服务漏洞
CVE-2014-7875 HP LaserJet CM3530 Multifunction Printer CC519A和CC520A 远程拒绝服务漏洞
CVE-2014-6130 IBM Notes Traveler For Android 信息泄露漏洞
CVE-2014-8474 CA Cloud Service Management 安全漏洞
CVE-2014-8473 CA Cloud Service Management 跨站请求伪造漏洞
CVE-2014-8472 CA Cloud Service Management 安全漏洞
CVE-2014-8471 CA Cloud Service Management 安全漏洞

Showing top 20 of 46 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2014-8592

No comments yet


Leave a comment