CVE-2018-2462

2018-09-1115:00:00

sap

www.cve.org

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.5%

JSON

In certain cases, BEx Web Java Runtime Export Web Service in SAP NetWeaver BI 7.30, 7.31. 7.40, 7.41, 7.50, does not sufficiently validate an XML document accepted from an untrusted source.

CNA Affected

[
  {
    "product": "SAP NetWeaver BI",
    "vendor": "SAP",
    "versions": [
      {
        "status": "affected",
        "version": "= 7.30"
      },
      {
        "status": "affected",
        "version": "= 7.31"
      },
      {
        "status": "affected",
        "version": "= 7.40"
      },
      {
        "status": "affected",
        "version": "= 7.41"
      },
      {
        "status": "affected",
        "version": "= 7.50"
      }
    ]
  }
]