CVE-2018-2399

🗓️ 14 Mar 2018 19:00:00Reported by sapType

Cross-Site Scripting in Process Monitoring Infrastructure, versions 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, due to inefficient encoding of user controlled inputs

Reporter	Title	Published	Views	Family All 6
CNVD	SAP Process Monitoring Infrastructure Cross-Site Scripting Vulnerability	28 Mar 201800:00	–	cnvd
CVE	CVE-2018-2399	14 Mar 201819:00	–	cve
EUVD	EUVD-2018-14254	7 Oct 202500:30	–	euvd
NVD	CVE-2018-2399	14 Mar 201819:29	–	nvd
OSV	CVE-2018-2399	14 Mar 201819:29	–	osv
Prion	Cross site scripting	14 Mar 201819:29	–	prion

[
  {
    "product": "SAP Process Monitoring Infrastructure",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "from 7.10 to 7.11"
      },
      {
        "status": "affected",
        "version": "7.20"
      },
      {
        "status": "affected",
        "version": "7.30"
      },
      {
        "status": "affected",
        "version": "7.31"
      },
      {
        "status": "affected",
        "version": "7.40"
      },
      {
        "status": "affected",
        "version": "7.50"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/103372
blogs	www.blogs.sap.com/2018/03/13/sap-security-patch-day-march-2018/
launchpad	www.launchpad.support.sap.com/

15 Mar 2018 09:57Current

6.1Medium risk

Vulners AI Score6.1

CVSS 36.1

EPSS0.00199