What is the CVSS score of CVE-2014-5174?

CVE-2014-5174 has a CVSS 2.0 base score of 3.5 (Low). CVSS vector: AV:N/AC:M/Au:S/C:P/I:N/A:N. EPSS exploitation probability: 0.4%.

Netweaver Business Warehouse CVE-2014-5174

LOW

Permissions, Privileges, and Access Controls (CWE-264)

2014-07-31 cve@mitre.org

Privilege Escalation SAP Netweaver Business Warehouse

3.5

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

3.5 LOW

AV:N/AC:M/Au:S/C:P/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:S/C:P/I:N/A:N

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Jul 31, 2014 - 14:55 cve.org

LOW 3.5

DescriptionCVE.org

The SAP Netweaver Business Warehouse component does not properly restrict access to the functions in the BW-SYS-DB-DB4 function group, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-264. The SAP Netweaver Business Warehouse component does not properly restrict access to the functions in the BW-SYS-DB-DB4 function group, which allows remote authenticated users to obtain sensitive information via unspecified vectors. Affected products include: Sap Netweaver Business Warehouse.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.