CVE-2018-2492

CVE-2018-2492: vulnerability in SAP NetWeaver Application Server (Java Library)

Published · Updated

Follow this CVE+ Monitor SAP NetWeaver Application Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.1%
SAML 2.0 functionality in SAP NetWeaver AS Java, does not sufficiently validate XML documents received from an untrusted source. This is fixed in versions 7.2, 7.30, 7.31, 7.40 and 7.50.
Affected products
SAP · SAP NetWeaver Application Server (Java Library)