CVE-2010-3983

SAP BusinessObjects Enterprise XI 3.2 - Authenticated Privilege Escalation via Program Job Server

Title source: llm

Description

CmcApp in SAP BusinessObjects Enterprise XI 3.2 allows remote authenticated users to gain privileges via vectors involving the Program Job Server and the Program Login property.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/68682

Exploit x_refsource_misc

http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf

Scores

EPSS 0.0047

EPSS Percentile 64.9%

Details

CWE

CWE-264

Status published

Products (1)

sap/businessobjects 3.2

Published Oct 18, 2010

Tracked Since Feb 18, 2026