CVE-2014-3131

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-04-30 · updated 2026-06-17
Weakness: CWE-264

Description

SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1.

Affected products

SAP Profile Maintenance: all versions

References

http://scn.sap.com/docs/DOC-8218
http://seclists.org/fulldisclosure/2014/Apr/300
http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-007
http://www.securityfocus.com/bid/67103
https://service.sap.com/sap/support/notes/1917381
http://scn.sap.com/docs/DOC-8218
http://seclists.org/fulldisclosure/2014/Apr/300
http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-007
http://www.securityfocus.com/bid/67103
https://service.sap.com/sap/support/notes/1917381

Get alerted when CVE-2014-3131 or the next vulnerability affects your stack