VYPR
← All advisories
High severity8.8NVD Advisory· Published Nov 13, 2018· Updated Jun 17, 2026

CVE-2018-2477

CVE-2018-2477

Description

Knowledge Management (XMLForms) in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not sufficiently validate an XML document accepted from an untrusted source.

Affected products

6
  • SAP/Netweaverllm-fuzzy5 versions
    7.30, 7.31, 7.40, 7.50+ 4 more
    • (no CPE)range: 7.30, 7.31, 7.40, 7.50
    • cpe:2.3:a:sap:netweaver:7.30:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.31:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.40:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.50:*:*:*:*:*:*:*
  • SAP/NetWeaver Knowledge Management XMLEditorcpe-rescue
    Range: = 7.30

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.