CVE-2018-2434

CVE-2018-2434: falha em SAP NetWeaver

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SAP NetWeaver+ Monitorar SAP UI Implementation for Decoupled Innovations

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.6%
A content spoofing vulnerability in the following components allows to render html pages containing arbitrary plain text content, which might fool an end user: UI add-on for SAP NetWeaver (UI_Infra, 1.0), SAP UI Implementation for Decoupled Innovations (UI_700, 2.0): SAP NetWeaver 7.00 Implementation, SAP User Interface Technology (SAP_UI 7.4, 7.5, 7.51, 7.52). There is little impact as it is not possible to embed active contents such as JavaScript or hyperlinks.
Produtos afetados
SAP · SAP NetWeaverSAP · SAP NetWeaver (UI_Infra)SAP · SAP UI Implementation for Decoupled Innovations (UI_700)SAP · SAP User Interface Technology (SAP_UI)