VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Dec 11, 2018· Updated Jun 17, 2026

CVE-2018-2486

CVE-2018-2486

Description

SAP Marketing (UICUAN (1.20, 1.30, 1.40), SAPSCORE (1.13, 1.14)) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected products

8
  • SAP/Marketingllm-fuzzy3 versions
    (expand)+ 2 more
    • (no CPE)
    • (no CPE)range: = 1.20
    • (no CPE)range: = 1.13
  • SAP/Marketing Sapscore2 versions
    cpe:2.3:a:sap:marketing_sapscore:1.13:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sap:marketing_sapscore:1.13:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:marketing_sapscore:1.14:*:*:*:*:*:*:*
  • SAP/Marketing Uicuan3 versions
    cpe:2.3:a:sap:marketing_uicuan:1.20:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:sap:marketing_uicuan:1.20:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:marketing_uicuan:1.30:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:marketing_uicuan:1.40:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.