Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-2302 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2303 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2304 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2305 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2306 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2307 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2308 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2309 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2310 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2311 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2312 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2313 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2314 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2315 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2316 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2317 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2318 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2319 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2320 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2321 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2322 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2323 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2324 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2325 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2326 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2327 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2328 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2329 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2330 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2331 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2332 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2333 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2334 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2335 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2336 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2337 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2338 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2339 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2340 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2341 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2342 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2343 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2344 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2345 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2346 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2347 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2348 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2349 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2350 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2351 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2352 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2353 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2354 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2355 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2356 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2357 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2358 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2359 State: REJECTED Published: 2019-01-22T20:00:00 Last Updated: 2019-01-22T17:57:02 Description: No description available.
CVE ID: CVE-2018-2360 State: PUBLISHED Published: 2018-01-09T15:00:00 Last Updated: 2024-08-05T04:14:39.585Z Vendors: SAP SE Products: SAP Startup Service Problem Types: Missing Authentication Description: SAP Startup Service, SAP KERNEL 7.45, 7.49, and 7.52, is missing an authentication check for functionalities that require user identity and cause consumption of file system storage. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2523961 - https://blogs.sap.com/2018/01/09/sap-security-patch-day-january-2018/ - http://www.securityfocus.com/bid/102448
CVE ID: CVE-2018-2361 State: PUBLISHED Published: 2018-01-09T15:00:00 Last Updated: 2024-08-05T04:14:39.619Z Vendors: SAP SE Products: SAP Solution Manager Problem Types: Missing Authorization Check Description: In SAP Solution Manager 7.20, the role SAP_BPO_CONFIG gives the Business Process Operations (BPO) configuration user more authorization than required for configuring the BPO tools. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.sap.com/2018/01/09/sap-security-patch-day-january-2018/ - https://launchpad.support.sap.com/#/notes/2507934 - http://www.securityfocus.com/bid/102450
CVE ID: CVE-2018-2362 State: PUBLISHED Published: 2018-01-09T15:00:00 Last Updated: 2024-08-05T04:14:39.598Z Vendors: SAP SE Products: SAP HANA Problem Types: Information Disclosure Description: A remote unauthenticated attacker, SAP HANA 1.00 and 2.00, could send specially crafted SOAP requests to the SAP Startup Service and disclose information such as the platform's hostname. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.sap.com/2018/01/09/sap-security-patch-day-january-2018/ - https://launchpad.support.sap.com/#/notes/2575750 - http://www.securityfocus.com/bid/102452
CVE ID: CVE-2018-2363 State: PUBLISHED Published: 2018-01-09T15:00:00 Last Updated: 2024-08-05T04:14:39.709Z Vendors: SAP SE Products: SAP NetWeaver Problem Types: Code Injection Description: SAP NetWeaver, SAP BASIS from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.52, contains code that allows you to execute arbitrary program code of the user's choice. A malicious user can therefore control the behaviour of the system or can potentially escalate privileges by executing malicious code without legitimate credentials. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.sap.com/2018/01/09/sap-security-patch-day-january-2018/ - https://launchpad.s
ram Container: References: - https://blogs.sap.com/2018/01/09/sap-security-patch-day-january-2018/ - https://launchpad.support.sap.com/#/notes/1906212 - http://www.securityfocus.com/bid/102449 - https://launchpad.support.sap.com/#/notes/2525392
CVE ID: CVE-2018-2364 State: PUBLISHED Published: 2018-02-14T12:00:00 Last Updated: 2024-08-05T04:14:39.595Z Vendors: SAP SE Products: SAP CRM WebClient UI, S4FND Problem Types: Cross-Site Scripting (XSS) Description: SAP CRM WebClient UI 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01, S4FND 1.02, does not sufficiently validate and/or encode hidden fields, resulting in Cross-Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103002 - https://launchpad.support.sap.com/#/notes/2541700 - https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE ID: CVE-2018-2365 State: PUBLISHED Published: 2018-03-01T17:00:00 Last Updated: 2024-08-05T04:14:39.579Z Vendors: SAP SE Products: SAP NetWeaver Portal WebDynpro RunTime Problem Types: Cross-Site Scripting (XSS) Description: SAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2547977 - http://www.securityfocus.com/bid/102999 - https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE ID: CVE-2018-2366 State: PUBLISHED Published: 2018-03-14T19:00:00 Last Updated: 2024-08-05T04:14:39.566Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP SE Products: SAP Business Process Automation (BPA) By Redwood Problem Types: Directory Traversal) Description: SAP Business Process Automation (BPA) By Redwood, 9.0, 9.1, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing 'traverse to parent directory' are passed through to the file APIs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103371 - https://blogs.sap.com/2018/03/13/sap-
: - CVE Program Container: References: - http://www.securityfocus.com/bid/103371 - https://blogs.sap.com/2018/03/13/sap-security-patch-day-march-2018/ - https://launchpad.support.sap.com/#/notes/2555667
CVE ID: CVE-2018-2367 State: PUBLISHED Published: 2018-03-01T17:00:00 Last Updated: 2024-08-05T04:14:39.579Z Vendors: SAP SE Products: SAP BASIS (ABAP File Interface) Problem Types: Directory Traversal Description: ABAP File Interface in, SAP BASIS, from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" are passed through to the file APIs. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/ - http://www.securityfocus.com/bid/103006 - https
https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/ - http://www.securityfocus.com/bid/103006 - https://launchpad.support.sap.com/#/notes/2562089
CVE ID: CVE-2018-2368 State: PUBLISHED Published: 2018-03-01T17:00:00 Last Updated: 2024-08-05T04:14:39.708Z Vendors: SAP SE Products: SAP NetWeaver System Landscape Directory, LM-Core Problem Types: Missing Authentication Check Description: SAP NetWeaver System Landscape Directory, LM-CORE 7.10, 7.20, 7.30, 7.31, 7.40, does not perform any authentication checks for functionalities that require user identity. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2565622 - http://www.securityfocus.com/bid/103000 - https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE ID: CVE-2018-2369 State: PUBLISHED Published: 2018-02-14T12:00:00 Last Updated: 2024-08-05T04:14:39.744Z Vendors: SAP SE Products: SAP HANA Problem Types: Information Disclosure Description: Under certain conditions SAP HANA, 1.00, 2.00, allows an unauthenticated attacker to access information which would otherwise be restricted. An attacker can misuse the authentication function of the SAP HANA server on its SQL interface and disclose 8 bytes of the server process memory. The attacker cannot influence or predict the location of the leaked memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102997 - https://blogs.sap.com/2018/02/13/sa
es: - CVE Program Container: References: - http://www.securityfocus.com/bid/102997 - https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/ - https://launchpad.support.sap.com/#/notes/2572940
CVE ID: CVE-2018-2370 State: PUBLISHED Published: 2018-02-14T12:00:00 Last Updated: 2024-08-05T04:14:39.730Z Vendors: SAP SE Products: SAP BI Launchpad Problem Types: Server Side Request Forgery (SSRF) Description: Server Side Request Forgery (SSRF) vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allow a malicious user to use common techniques to determine which ports are in use on the backend server. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2493727 - http://www.securityfocus.com/bid/102998 - https://blogs.sap.com/2018/02/13/sap-security-patch-day-february
tes/2493727 - http://www.securityfocus.com/bid/102998 - https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE ID: CVE-2018-2371 State: PUBLISHED Published: 2018-02-14T12:00:00 Last Updated: 2024-08-05T04:14:39.674Z Vendors: SAP SE Products: SAP NetWeaver Java Web Application Problem Types: Cross-Site Scripting (XSS) Description: The SAML 2.0 service provider of SAP Netweaver AS Java Web Application, 7.50, does not sufficiently encode user controlled inputs, which results in Cross-Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103005 - https://launchpad.support.sap.com/#/notes/2560741 - https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE ID: CVE-2018-2372 State: PUBLISHED Published: 2018-02-14T12:00:00 Last Updated: 2024-08-05T04:14:39.581Z Vendors: SAP SE Products: SAP HANA Extended Application Services Problem Types: Information Disclosure Description: A plain keystore password is written to a system log file in SAP HANA Extended Application Services, 1.0, which could endanger confidentiality of SSL communication. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2589129 - https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE ID: CVE-2018-2373 State: PUBLISHED Published: 2018-02-14T12:00:00 Last Updated: 2024-08-05T04:14:39.581Z Vendors: SAP SE Products: SAP HANA Extended Application Services Problem Types: SQL Injection Description: Under certain circumstances, a specific endpoint of the Controller's API could be misused by unauthenticated users to execute SQL statements that deliver information about system configuration in SAP HANA Extended Application Services, 1.0. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2589129 - https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE ID: CVE-2018-2374 State: PUBLISHED Published: 2018-02-14T12:00:00 Last Updated: 2024-08-05T04:14:39.762Z Vendors: SAP SE Products: SAP HANA Extended Application Services Problem Types: Information Disclosure Description: In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve sensitive application data like service bindings within that space. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103018 - https://launchpad.support.sap.com/#/notes/2589129 - https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE ID: CVE-2018-2375 State: PUBLISHED Published: 2018-02-14T12:00:00 Last Updated: 2024-08-05T04:14:39.702Z Vendors: SAP SE Products: SAP HANA Extended Application Services Problem Types: Information Disclosure Description: In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve application environments within that space. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2589129 - https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE ID: CVE-2018-2376 State: PUBLISHED Published: 2018-02-14T12:00:00 Last Updated: 2024-08-05T04:14:39.746Z Vendors: SAP SE Products: SAP HANA Extended Application Services Problem Types: Information Disclosure Description: In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve application environments within that space. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2589129 - https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE ID: CVE-2018-2377 State: PUBLISHED Published: 2018-02-14T12:00:00 Last Updated: 2024-08-05T04:14:39.678Z Vendors: SAP SE Products: SAP HANA Extended Application Services Problem Types: Information Disclosure Description: In SAP HANA Extended Application Services, 1.0, some general server statistics and status information could be retrieved by unauthorized users. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2589129 - https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE ID: CVE-2018-2378 State: PUBLISHED Published: 2018-02-14T12:00:00 Last Updated: 2024-10-15T17:15:09.778Z Vendors: SAP SE Products: SAP HANA Extended Application Services Problem Types: Information Disclosure Description: In SAP HANA Extended Application Services, 1.0, unauthorized users can read statistical data about deployed applications including resource consumption. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/2589129 - https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE ID: CVE-2018-2379 State: PUBLISHED Published: 2018-02-14T12:00:00 Last Updated: 2024-11-14T20:52:52.938Z Vendors: SAP SE Products: SAP HANA Extended Application Services Problem Types: Information Disclosure Description: In SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given username is valid by evaluating error messages of a specific endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/2589129 - https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE ID: CVE-2018-2380 State: PUBLISHED Published: 2018-03-01T17:00:00.000Z Last Updated: 2025-10-21T23:45:56.073Z Vendors: SAP SE Products: SAP CRM Problem Types: Directory/Path Traversal Description: SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" are passed through to the file APIs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/erpscanteam/CVE-2018-2380 - https://www.exploit-db.com/exploits/44292/ - https://launchpad.support.sap.com/#/notes/2547431 - http://www.securityfocus.com/bi
www.exploit-db.com/exploits/44292/ - https://launchpad.support.sap.com/#/notes/2547431 - http://www.securityfocus.com/bid/103001 - https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE ID: CVE-2018-2381 State: PUBLISHED Published: 2018-02-14T12:00:00 Last Updated: 2024-08-05T04:14:39.759Z Vendors: SAP SE Products: SAP ERP Financials Information System Problem Types: Missing Authorization Check Description: SAP ERP Financials Information System (SAP_APPL 6.00, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16; SAP_FIN 6.17, 6.18, 7.00, 7.20, 7.30 S4CORE 1.00, 1.01, 1.02) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2545842 - http://www.securityfocus.com/bid/103010 - https://blogs.sap.com/2018/02/13/sap-security-
pport.sap.com/#/notes/2545842 - http://www.securityfocus.com/bid/103010 - https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE ID: CVE-2018-2382 State: PUBLISHED Published: 2018-02-14T12:00:00 Last Updated: 2024-08-05T04:14:39.677Z Vendors: SAP SE Products: SAP Internet Graphics Server Problem Types: Information Disclosure Description: A vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to store graphics in a controlled area and as such gain information from system area, which is not available to the user otherwise. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2525222 - https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/