CVE-2018-2363

published 2018-01-09

CVE-2018-2363: SAP NetWeaver, SAP BASIS from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.52, contains code that allows you to execute arbitrary program…

Priority P3 54 high 8.8 CVSS 3.0

AV N AC L PR L UI N S U C H I H A H

SAP NetWeaver, SAP BASIS from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.52, contains code that allows you to execute arbitrary program code of the user's choice. A malicious user can therefore control the behaviour of the system or can potentially escalate privileges by executing malicious code without legitimate credentials.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
sap	business_application_software_integrated_solution	—	—
sap	business_application_software_integrated_solution	—	—
sap	business_application_software_integrated_solution	—	—
sap	business_application_software_integrated_solution	7.00 – 7.02	—
sap	business_application_software_integrated_solution	7.10 – 7.11	—
sap	business_application_software_integrated_solution	7.50 – 7.52	—
sap_se	sap_netweaver	—	—
sap_se	sap_netweaver	—	—
sap_se	sap_netweaver	—	—
sap_se	sap_netweaver	—	—
sap_se	sap_netweaver	—	—
sap_se	sap_netweaver	—	—
sap_se	sap_netweaver	—	—
sap_se	sap_netweaver	—	—
sap_se	sap_netweaver	—	—

CVSS provenance

nvd v3.0 8.8 HIGH CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 6.5 MEDIUM AV:N/AC:L/Au:S/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-94