VULNERABILITY INTELLIGENCE

CVE-2018-2492

CVSS score7.1 HIGH
EPSS probability1.11%
CISA KEVNot currently listed
Published2018-12-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Description

SAML 2.0 functionality in SAP NetWeaver AS Java, does not sufficiently validate XML documents received from an untrusted source. This is fixed in versions 7.2, 7.30, 7.31, 7.40 and 7.50.

Weakness classification

  • CWE-611: Improper Restriction of XML External Entity Reference

Primary references