Unrated severityNVD Advisory· Published Oct 18, 2010· Updated Apr 29, 2026

CVE-2010-3982

Description

SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to trigger TCP connections to arbitrary intranet hosts on any port, and obtain potentially sensitive information about open ports, via the apstoken parameter to the CrystalReports/viewrpt.cwr URI, related to an "internal port scanning" issue.

Affected products

SAP/Businessobjects
cpe:2.3:a:sap:businessobjects:3.2:*:enterprise_xi:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdfnvdExploit
osvdb.org/68681nvd
exchange.xforce.ibmcloud.com/vulnerabilities/62682nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000