High severity8.8NVD Advisory· Published Jan 9, 2018· Updated Jun 17, 2026
CVE-2018-2361
CVE-2018-2361
Description
In SAP Solution Manager 7.20, the role SAP_BPO_CONFIG gives the Business Process Operations (BPO) configuration user more authorization than required for configuring the BPO tools.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:sap:solution_manager:7.20:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sap:solution_manager:7.20:*:*:*:*:*:*:*
- (no CPE)range: = 7.20
- SAP SE/SAP Solution Managerv5Range: 7.20
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/102450nvdThird Party AdvisoryVDB Entry
- blogs.sap.com/2018/01/09/sap-security-patch-day-january-2018/nvdVendor Advisory
- launchpad.support.sap.comnvdPermissions Required
News mentions
0No linked articles in our index yet.