Unscored severity · published May 12, 2015
CVE-2015-3981
SAP NetWeaver RFC SDK allows attackers to obtain sensitive information via unspecified vectors, aka SAP Security Note 2084037
–
CVSS
1.5%
EPSS
No
On KEV
Description
SAP NetWeaver RFC SDK allows attackers to obtain sensitive information via unspecified vectors, aka SAP Security Note 2084037.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NR
Netweaver Rfc Sdk · Sap
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-3981
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-3981
www.securityfocus.com
http://www.securityfocus.com/bid/74627
www.securitytracker.com
http://www.securitytracker.com/id/1032308
erpscan.io
https://erpscan.io/press-center/blog/sap-security-notes-april-2015/
More from Netweaver Rfc Sdk
–
CVE-2015-2282
Stack-based buffer overflow in the LZC decompression implementation (CsObjectInt::CsDecomprLZC function in vpa106cslzc.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server…
–
CVE-2015-2278
The LZH decompression implementation (CsObjectInt::BuildHufTree function in vpa108csulzh.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP, Netweaver Application…