CVE-2018-2445

2018-08-1416:00:00

sap

www.cve.org

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.5%

JSON

AdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to manipulate the vulnerable application to send crafted requests on behalf of the application, resulting in a Server-Side Request Forgery (SSRF) vulnerability.

CNA Affected

[
  {
    "product": "SAP BusinessObjects Business Intelligence Platform",
    "vendor": "SAP",
    "versions": [
      {
        "status": "affected",
        "version": "4.1"
      },
      {
        "status": "affected",
        "version": "4.2"
      }
    ]
  }
]