« Volver al listado

CVE-2014-8662

Estado: ModificadaAlta (7.8)—

Unspecified vulnerability in SAP Payroll Process allows remote attackers to cause a denial of service via vectors related to session handling.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

SAP — Payroll Process

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-8662",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-11-06T15:55:14.383",
  "references": [
    {
      "url": "http://blog.onapsis.com/analyzing-sap-security-notes-october-2014-edition/",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://service.sap.com/sap/support/notes/0002076845",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://blog.onapsis.com/analyzing-sap-security-notes-october-2014-edition/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://service.sap.com/sap/support/notes/0002076845",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in SAP Payroll Process allows remote attackers to cause a denial of service via vectors related to session handling."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en SAP Payroll Process permite a atacantes remotos causar una denegación de servicio a través de vectores relacionados con el manejo de sesiones."
    }
  ],
  "lastModified": "2026-06-17T00:17:06.947",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sap:payroll_process:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4AE8A161-B126-4399-A204-0E7D7AEF9868"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}