Unrated severityNVD Advisory· Published Nov 13, 2018· Updated Aug 5, 2024

CVE-2018-2481

Description

In some SAP standard roles, in SAP_ABA versions, 7.00 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, 75C to 75D, a transaction code reserved for customer is used. By implementing such transaction code a malicious user may execute unauthorized transaction functionality.

Affected products

SAP/ABAllm-create2 versions
7.00 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, 75C to 75D+ 1 more
- (no CPE)range: 7.00 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, 75C to 75D
- (no CPE)range: = 7.00 to 7.02

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/105906mitrevdb-entryx_refsource_BID
launchpad.support.sap.commitrex_refsource_MISC
wiki.scn.sap.com/wiki/pages/viewpage.actionmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000