VYPR
← All advisories
High severity8.8NVD Advisory· Published Aug 14, 2018· Updated Jun 17, 2026

CVE-2018-2442

CVE-2018-2442

Description

In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the user session details captured by an HTTP analysis tool could be reused in a HTML page while the user session is still valid.

Affected products

10
  • SAP/Businessobjects Business Intelligence4 versions
    cpe:2.3:a:sap:businessobjects_business_intelligence:4.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:sap:businessobjects_business_intelligence:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:businessobjects_business_intelligence:4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:businessobjects_business_intelligence:4.2:*:*:*:*:*:*:*
    • (no CPE)range: 4.0, 4.1, 4.2
  • SAP/Internet Graphics Server5 versions
    cpe:2.3:a:sap:internet_graphics_server:7.20:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:sap:internet_graphics_server:7.20:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:internet_graphics_server:7.20ext:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:internet_graphics_server:7.45:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:internet_graphics_server:7.49:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:internet_graphics_server:7.53:*:*:*:*:*:*:*
  • SAP/Sap Businessobjects Business Intelligence (bi Workspace)cpe-rescue
    Range: 4.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.