VULNERABILITY INTELLIGENCE

CVE-2018-2494

CVSS score8 HIGH
EPSS probability0.76%
CISA KEVNot currently listed
Published2018-12-11
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

Necessary authorization checks for an authenticated user, resulting in escalation of privileges, have been fixed in SAP Basis AS ABAP of SAP NetWeaver 700 to 750, from 750 onwards delivered as ABAP Platform.

Weakness classification

  • CWE-863: Incorrect Authorization

Primary references