High severity7.2NVD Advisory· Published Apr 30, 2019· Updated Jun 17, 2026
CVE-2018-15207
CVE-2018-15207
Description
BPC SmartVista 2 has Improper Access Control in the SVFE module, where it fails to appropriately restrict access: a normal user is able to access the SVFE2/pages/finadmin/currconvrate/currconvrate.jsf functionality that should be only accessible to an admin.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1- neetech18.blogspot.com/2019/03/incorrect-access-control-smart-vista.htmlnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.