CVE-2015-4161

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2015-06-02 · updated 2026-06-17
Weakness: CWE-264

Description

SAP Afaria does not properly restrict access to unspecified functionality, which allows remote attackers to obtain sensitive information, gain privileges, or have other unspecified impact via unknown vectors, SAP Security Note 2155690.

Affected products

SAP Afaria: all versions

References

http://seclists.org/fulldisclosure/2015/May/96
http://www.securityfocus.com/bid/74800
http://seclists.org/fulldisclosure/2015/May/96
http://www.securityfocus.com/bid/74800

Get alerted when CVE-2015-4161 or the next vulnerability affects your stack