CVEvulnerability

CVE-2015-1312

7.5 HIGH Published 2015-01-22 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2015-01-22
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses: CWE-264

Description

The Dealer Portal in SAP ERP does not properly restrict access, which allows remote attackers to obtain sensitive information, gain privileges, and possibly have other unspecified impact via unknown vectors, aka SAP Note 2000401. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

• sap enterprise resource planning

Weakness · not in database (1)

CWE-264

References

https://erpscan.io/press-center/blog/sap-critical-patch-update-january-2015/ erpscan.io
https://erpscan.io/press-center/blog/sap-critical-patch-update-january-2015/ erpscan.io

CVE-2015-1312

Description

Affected configurations

Related

Weakness · not in database (1)

References