CVE-2014-8315: polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending o...

Security readout for executives and security teams

This CVE describes a flaw in SAP BusinessObjects Explorer where a remote user could infer whether the server can connect to other hosts and ports. The business risk is internal reconnaissance: an exposed application could help an attacker map reachable systems before a larger intrusion. Exposure is limited to organizations running SAP BusinessObjects Explorer 14.0.5 build 882, particularly where the Explorer web interface is reachable by untrusted users or can reach sensitive internal networks. Treat as a targeted hardening issue, not an emergency, unless the application is Internet-facing or highly connected internally. Prioritize vendor guidance review and network exposure reduction. Mitigation focus: Review SAP Security Note 1908562 for vendor remediation guidance.; Inventory SAP BusinessObjects Explorer 14.0.5 build 882 deployments.; Restrict Explorer access to trusted networks and authenticated users..

Prepared

Jun 14, 2026, 13:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.