CVE-2018-2371

MEDIO 6.1CVE-2018-2371 · Published 14/02/2018 · updated 17/06/2026

In breve

CVE-2018-2371 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda netweaver java web application (sap).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.96%, superiore al 61.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
netweaver java web application sap	`= 7.50`	No fix yet

Description

The SAML 2.0 service provider of SAP Netweaver AS Java Web Application, 7.50, does not sufficiently encode user controlled inputs, which results in Cross-Site Scripting (XSS) vulnerability.

References

securityfocus.com/bid/103005 · Third Party Advisory
blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018 · Vendor Advisory
launchpad.support.sap.com · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free