What’s Vulnerable › Vulnerabilities

CVE-2014-2748

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-04-10 · updated 2026-06-17
• Weakness: CWE-264

Description

The Security Audit Log facility in SAP Enhancement Package (EHP) 6 for SAP ERP 6.0 allows remote attackers to modify or delete arbitrary log classes via unspecified vectors. NOTE: some of these details are obtained from third party information.

Affected products

• SAP Enhancement Package: 6.0

References

• http://secunia.com/advisories/57741
• http://www.onapsis.com/get.php?resid=adv_onapsis-2014-002
• http://www.onapsis.com/research-advisories.php
• https://exchange.xforce.ibmcloud.com/vulnerabilities/92334
• https://service.sap.com/sap/support/notes/1926485
• http://secunia.com/advisories/57741
• http://www.onapsis.com/get.php?resid=adv_onapsis-2014-002
• http://www.onapsis.com/research-advisories.php
• https://exchange.xforce.ibmcloud.com/vulnerabilities/92334
• https://service.sap.com/sap/support/notes/1926485

Get alerted when CVE-2014-2748 or the next vulnerability affects your stack