Vulnerability in SAP Businessobjects

CVE-2010-3980

Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 does not limit the number of CUIDs that may be requested, which allows remote authenticated users to cause a denial of service via a large numCuids value in a GenerateCuids SOAPAction to the dswsbobje/services/biplatform URI.

EPSS: 0.009 (57.1th percentile) — read the EPSS interpretation.

Affected products

References