← All advisories

Unrated severityNVD Advisory· Published Nov 13, 2018· Updated Aug 5, 2024

CVE-2018-2476

CVE-2018-2476

Description

Due to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.31, 7.40, an attacker can redirect users to a malicious site.

Affected products

2

SAP/Netweaverllm-fuzzy2 versions
=7.30, 7.31, 7.40+ 1 more
- (no CPE)range: =7.30, 7.31, 7.40
- (no CPE)range: = 7.30

Patches

Vulnerability mechanics

References

3

www.securityfocus.com/bid/105898mitrevdb-entryx_refsource_BID
launchpad.support.sap.commitrex_refsource_MISC
wiki.scn.sap.com/wiki/pages/viewpage.actionmitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.