← All advisories

Medium severity6.1NVD Advisory· Published Nov 13, 2018· Updated Jun 17, 2026

CVE-2018-2476

CVE-2018-2476

Description

Due to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.31, 7.40, an attacker can redirect users to a malicious site.

Affected products

5

SAP/Netweaver5 versions
cpe:2.3:a:sap:netweaver:7.30:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:sap:netweaver:7.30:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver:7.31:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver:7.40:*:*:*:*:*:*:*
- (no CPE)range: 7.30, 7.31, 7.40
- (no CPE)range: = 7.30

Patches

Vulnerability mechanics

References

3

www.securityfocus.com/bid/105898nvdThird Party AdvisoryVDB Entry
launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory

News mentions

0

No linked articles in our index yet.