VULNERABILITY INTELLIGENCE

CVE-2018-2461

CVSS score8.8 HIGH
EPSS probability1.33%
CISA KEVNot currently listed
Published2018-09-11
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Missing authorization check in SAP HCM Fiori "People Profile" (GBX01 HR version 6.0) for an authenticated user which may result in an escalation of privileges.

Weakness classification

  • CWE-862: Missing Authorization

Primary references