Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Information Disclosure vulnerability in the SAP NetWeaver BW (BEx Analyzer)
Vulnerability Description
Due to missing authorization checks, SAP BEx Analyzer allows an authenticated attacker to access information over the network which is otherwise restricted. On successful exploitation the attacker can enumerate information causing a limited impact on confidentiality of the application.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
侵犯隐私
Vulnerability Title
SAP NetWeaver 安全漏洞
Vulnerability Description
SAP NetWeaver是德国思爱普（SAP）公司的一套面向服务的集成化应用平台。该平台主要为SAP应用程序提供开发和运行环境。 SAP NetWeaver存在安全漏洞，该漏洞源于缺少授权检查，SAP BEx 分析器允许经过身份验证的攻击者通过网络访问信息，否则这些信息将受到限制。
CVSS Information
N/A
Vulnerability Type
N/A