CVE-2015-3979 - Unspecified vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows attackers t

CVE-2015-3979

Summary

Unspecified vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows attackers to execute arbitrary code via unknown vectors, aka SAP Security Note 2097534.

References

http://www.onapsis.com/blog/analyzing-sap-security-notes-april-2015-edition/
http://www.securityfocus.com/bid/74626
http://www.securitytracker.com/id/1032309

Vulnerable Configurations

cpe:2.3:a:sap:customer_relationship_management:-:*:*:*:*:*:*:*
cpe:2.3:a:sap:customer_relationship_management:-:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 03-01-2017 - 03:00)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	74626
misc	http://www.onapsis.com/blog/analyzing-sap-security-notes-april-2015-edition/
sectrack	1032309

Last major update

03-01-2017 - 03:00

Published

12-05-2015 - 20:59

Last modified

03-01-2017 - 03:00