Sap Businessobjects Edge vulnerabilities

CVE-2014-9320 [CRITICAL] CWE-287 CVE-2014-9320: SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_T SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and consequently gain SYSTEM privileges via vectors involving CORBA calls, aka SAP Note 2039905.

CVE-2015-2074 [HIGH] CWE-22 CVE-2015-2074: The File Repository Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attac The File Repository Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to write to arbitrary files via a full pathname, aka SAP Note 2018681.

CVE-2015-2073 [HIGH] CWE-22 CVE-2015-2073: The File RepositoRy Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attac The File RepositoRy Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to read arbitrary files via a full pathname, aka SAP Note 2018682.

CVE-2015-7730 [CRITICAL] CWE-119 CVE-2015-7730: SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1 R3 SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1 R3 allow remote attackers to cause a denial of service (out-of-bounds read and listener crash) via a crafted GIOP packet, aka SAP Security Note 2001108.

CVE-2015-2075 [MEDIUM] CWE-264 CVE-2015-2075: SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue v SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP Note 2011396.

CVE-2015-2076 [MEDIUM] CWE-200 CVE-2015-2076: The Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive inf The Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information by reading an audit event, aka SAP Note 2011395.