« Volver al listado

CVE-2015-7730

Estado: ModificadaAlta (10)—

SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1 R3 allow remote attackers to cause a denial of service (out-of-bounds read and listener crash) via a crafted GIOP packet, aka SAP Security Note 2001108.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

SAP — BusinessobjectsSAP — Businessobjects EdgeSAP — Businessobjects XI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-7730",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-10-15T20:59:08.020",
  "references": [
    {
      "url": "http://seclists.org/fulldisclosure/2015/Sep/81",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id/1033637",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.onapsis.com/blog/analyzing-sap-security-notes-may-2015-edition",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.onapsis.com/research/security-advisories/SAP-Business-Objects-Memory-Corruption",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2015/Sep/81",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1033637",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.onapsis.com/blog/analyzing-sap-security-notes-may-2015-edition",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.onapsis.com/research/security-advisories/SAP-Business-Objects-Memory-Corruption",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1 R3 allow remote attackers to cause a denial of service (out-of-bounds read and listener crash) via a crafted GIOP packet, aka SAP Security Note 2001108."
    },
    {
      "lang": "es",
      "value": "SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0 y BusinessObjects XI (BOXI) 3.1 R3 permite a atacantes remotos causar una denegación de servicio (lectura fuera de limite y caída del receptor) a través de un paquete GIOP manipulado, también conocido como SAP Security Note 2001108."
    }
  ],
  "lastModified": "2026-06-17T00:33:02.777",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sap:businessobjects:4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BC362E4E-0549-4F9A-8FEE-302D7B4E0396"
            },
            {
              "criteria": "cpe:2.3:a:sap:businessobjects_edge:4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "37294BF8-A978-4054-9F65-AA465DDA9E8B"
            },
            {
              "criteria": "cpe:2.3:a:sap:businessobjects_xi:3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BF32F47A-26FB-4D10-B53F-31C408DB428B"
            },
            {
              "criteria": "cpe:2.3:a:sap:businessobjects_xi:r3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "848C70CA-A8CD-458D-ADEA-4F95D6596959"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}