Medium severity6.1NVD Advisory· Published Feb 14, 2018· Updated Jun 17, 2026

CVE-2018-2371

Description

The SAML 2.0 service provider of SAP Netweaver AS Java Web Application, 7.50, does not sufficiently encode user controlled inputs, which results in Cross-Site Scripting (XSS) vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

SAP/NetWeaver AS Java Logon applicationllm-fuzzy
Range: = 7.50
SAP SE/SAP NetWeaver Java Web Applicationv5
Range: 7.50

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/103005nvdThird Party AdvisoryVDB Entry
blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/nvdVendor Advisory
launchpad.support.sap.comnvdPermissions Required

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000