CVE-2014-3132

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-04-30 · updated 2026-06-17
Weakness: CWE-264

Description

SAP Background Processing does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1.

Affected products

SAP Background Processing: all versions

References

http://scn.sap.com/docs/DOC-8218
http://seclists.org/fulldisclosure/2014/Apr/299
http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-006
http://www.securityfocus.com/bid/67107
https://service.sap.com/sap/support/notes/1918333
http://scn.sap.com/docs/DOC-8218
http://seclists.org/fulldisclosure/2014/Apr/299
http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-006
http://www.securityfocus.com/bid/67107
https://service.sap.com/sap/support/notes/1918333

Get alerted when CVE-2014-3132 or the next vulnerability affects your stack