Vulnerability Description
In some SAP standard roles, in SAP_ABA versions, 7.00 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, 75C to 75D, a transaction code reserved for customer is used. By implementing such transaction code a malicious user may execute unauthorized transaction functionality.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sap | Advanced Business Application Programming | >= 7.00, <= 7.02 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/105906Third Party AdvisoryVDB Entry
- https://launchpad.support.sap.com/#/notes/2693083Release NotesVendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832Vendor Advisory
- http://www.securityfocus.com/bid/105906Third Party AdvisoryVDB Entry
- https://launchpad.support.sap.com/#/notes/2693083Release NotesVendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832Vendor Advisory
FAQ
What is CVE-2018-2481?
CVE-2018-2481 is a vulnerability with a CVSS score of 7.2 (HIGH). In some SAP standard roles, in SAP_ABA versions, 7.00 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, 75C to 75D, a transaction code reserved for customer is used. By implementing such transaction code...
How severe is CVE-2018-2481?
CVE-2018-2481 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-2481?
Check the references section above for vendor advisories and patch information. Affected products include: Sap Advanced Business Application Programming.