Medium severity5.4NVD Advisory· Published Apr 10, 2018· Updated Jun 17, 2026

CVE-2018-2403

Description

Under certain conditions, SAP Disclosure Management 10.1 allows an attacker to access information which would otherwise be restricted. It is possible for an authorized user to get SAP Disclosure Management to point a specific chapter type to a chapter the user has not been given access to.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Cognos Disclosure Managementllm-fuzzy
Range: =10.1
SAP SE/SAP Disclosure Managementv5
Range: 10.1

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/103727nvdThird Party AdvisoryVDB Entry
blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/nvdVendor Advisory
launchpad.support.sap.comnvdPermissions Required

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000