Medium severity5.4NVD Advisory· Published Apr 10, 2018· Updated Jun 17, 2026
CVE-2018-2405
CVE-2018-2405
Description
SAP Solution Manager, 7.10, 7.20, Incident Management Work Center allows an attacker to upload a malicious script as an attachment and this could lead to possible Cross-Site Scripting.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:sap:solution_manager:7.10:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:sap:solution_manager:7.10:*:*:*:*:*:*:*
- cpe:2.3:a:sap:solution_manager:7.20:*:*:*:*:*:*:*
- (no CPE)range: >=7.10, <=7.20
- SAP SE/SAP Solution Managerv5Range: 7.10
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/103703nvdThird Party AdvisoryVDB Entry
- blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/nvdVendor Advisory
- launchpad.support.sap.comnvdPermissions Required
News mentions
0No linked articles in our index yet.