VYPR
← All advisories
High severity8.8NVD Advisory· Published Nov 13, 2018· Updated Jun 17, 2026

CVE-2018-2477

CVE-2018-2477

Description

Knowledge Management (XMLForms) in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not sufficiently validate an XML document accepted from an untrusted source.

Affected products

6
  • SAP/Netweaver5 versions
    cpe:2.3:a:sap:netweaver:7.30:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:sap:netweaver:7.30:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.31:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.40:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.50:*:*:*:*:*:*:*
    • (no CPE)range: 7.30, 7.31, 7.40, 7.50
  • SAP/NetWeaver Knowledge Management XMLEditorcpe-rescue
    Range: = 7.30

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.