CVE-2018-2477

2018-11-1320:00:00

sap

www.cve.org

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.5%

JSON

Knowledge Management (XMLForms) in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not sufficiently validate an XML document accepted from an untrusted source.

CNA Affected

[
  {
    "product": "Knowledge Management (XMLForms) in SAP NetWeaver",
    "vendor": "SAP",
    "versions": [
      {
        "status": "affected",
        "version": "= 7.30"
      },
      {
        "status": "affected",
        "version": "= 7.31"
      },
      {
        "status": "affected",
        "version": "= 7.40"
      },
      {
        "status": "affected",
        "version": "= 7.50"
      }
    ]
  }
]