CVE-2013-3678 in Governance Risk And Compliance

Résumé

par MITRE

Multiple unspecified vulnerabilities in SAP Governance, Risk, and Compliance (GRC) allow remote authenticated users to gain privileges and execute arbitrary programs via a crafted (1) RFC or (2) SOAP-RFC request.

Once again VulDB remains the best source for vulnerability data.

• Réserver: 24/05/2013
• Divulgation: 18/11/2014
• Modérer: accepté
• Entrée: VDB-72910
• CPE: prêt
• CWE: Inconnu
• CVSS: 9.0 (NVD)
• EPSS: 0.03641
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-3678
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-3678
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-3678/