cbcvebase.
CVE-2018-2419
published 2018-05-09

CVE-2018-2419: SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary…

PriorityP423medium4.6CVSS 3.0
AVNACLPRLUIRSUCLILAN
EPSS
0.86%
54.2th percentile
SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Affected

22 ranges
VendorProductVersion rangeFixed in
sapea-finserv——
sapea-finserv——
sapea-finserv——
sapea-finserv——
sapea-finserv——
sapea-finserv——
sapea-finserv——
saps4core——
saps4core——
sapsapscore——
sapsapscore——
sap_sesap_enterprise_financial_services——
sap_sesap_enterprise_financial_services——
sap_sesap_enterprise_financial_services——
sap_sesap_enterprise_financial_services——
sap_sesap_enterprise_financial_services——
sap_sesap_enterprise_financial_services——
sap_sesap_enterprise_financial_services——
sap_sesap_enterprise_financial_services——
sap_sesap_enterprise_financial_services——
sap_sesap_enterprise_financial_services——
sap_sesap_enterprise_financial_services——

CVSS provenance

nvdv3.04.6MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
nvdv2.05.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:N
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.