Medium severity4.3NVD Advisory· Published Nov 13, 2018· Updated Jun 17, 2026

CVE-2018-2483

Description

HTTP Verb Tampering is possible in SAP BusinessObjects Business Intelligence Platform, versions 4.1 and 4.2, Central Management Console (CMC) by changing request method.

Affected products

SAP/Businessobjects Business Intelligence2 versions
cpe:2.3:a:sap:businessobjects_business_intelligence:4.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sap:businessobjects_business_intelligence:4.1:*:*:*:*:*:*:*
- cpe:2.3:a:sap:businessobjects_business_intelligence:4.2:*:*:*:*:*:*:*
SAP/BusinessObjects Business Intelligence Platform (Web Intelligence)llm-fuzzy2 versions
4.1 and 4.2+ 1 more
- (no CPE)range: 4.1 and 4.2
- (no CPE)range: = 4.1

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/105899nvdThird Party AdvisoryVDB Entry
launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000