High severity8.8NVD Advisory· Published Jul 10, 2018· Updated Jun 17, 2026
CVE-2018-2436
CVE-2018-2436
Description
Executing transaction WRCK in SAP R/3 Enterprise Retail (EHP6) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Affected products
3= EHP6+ 2 more
- (no CPE)range: = EHP6
- (no CPE)range: = EHP6
- cpe:2.3:a:sap:r\/3_enterprise_retail:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/104703nvdThird Party AdvisoryVDB Entry
- wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory
- launchpad.support.sap.comnvdPermissions Required
News mentions
0No linked articles in our index yet.