← back
CVE-2018-2474

CVE-2018-2474

EPSS 0.7%
SAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2) application allows an attacker to trick an authenticated user to send unintended request to the web server. This vulnerability is due to insufficient CSRF protection.
Affected products
SAP · SAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2)

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://launchpad.support.sap.com/#/notes/2696889https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095http://www.securityfocus.com/bid/105534