{ "schema_version": "1.4.0", "id": "GHSA-w247-hc6c-86q8", "modified": "2022-05-17T05:47:44Z", "published": "2022-05-17T05:47:44Z", "aliases": [ "CVE-2010-3980" ], "details": "Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 does not limit the number of CUIDs that may be requested, which allows remote authenticated users to cause a denial of service via a large numCuids value in a GenerateCuids SOAPAction to the dswsbobje/services/biplatform URI.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3980" }, { "type": "WEB", "url": "http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf" } ], "database_specific": { "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2010-10-18T17:00:00Z" } }