CVE-2015-2075

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-02-27 · updated 2026-06-17
Weakness: CWE-264

Description

SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP Note 2011396.

Affected products

SAP Businessobjects Edge: 4.0

References

http://packetstormsecurity.com/files/130522/SAP-Business-Objects-Unauthorized-Audit-Information-Delete.html
http://seclists.org/fulldisclosure/2015/Feb/95
http://www.securityfocus.com/archive/1/534751/100/0/threaded
http://www.securityfocus.com/bid/72778
http://packetstormsecurity.com/files/130522/SAP-Business-Objects-Unauthorized-Audit-Information-Delete.html
http://seclists.org/fulldisclosure/2015/Feb/95
http://www.securityfocus.com/archive/1/534751/100/0/threaded
http://www.securityfocus.com/bid/72778

Get alerted when CVE-2015-2075 or the next vulnerability affects your stack