CVE-2018-2427: vulnerability in SAP BusinessObjects Business Intelligence Suite
Published · Updated
Follow this CVE+ Monitor SAP BusinessObjects Business Intelligence Suite+ Monitor SAP Crystal Reports
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.7%
SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, and SAP Crystal Reports (version for Visual Studio .NET, Version 2010) allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application.
Related CVEs — SAP BusinessObjects Business Intelligence Suite
In the same product, most dangerous first.