CVE-2018-2478

🗓️ 13 Nov 2018 20:00:00Reported by sapType

Attacker can execute commands on TREX / BWA host via CVE-2018-2478, affecting SAP Basis 7.0 to 7.5

Reporter	Title	Published	Views	Family All 5
CNVD	SAP Basis Remote Code Execution Vulnerability	16 Nov 201800:00	–	cnvd
CVE	CVE-2018-2478	13 Nov 201820:00	–	cve
EUVD	EUVD-2018-14333	7 Oct 202500:30	–	euvd
NVD	CVE-2018-2478	13 Nov 201820:29	–	nvd
Prion	Design/Logic Flaw	13 Nov 201820:29	–	prion

[
  {
    "product": "SAP Basis (TREX / BWA installation)",
    "vendor": "SAP",
    "versions": [
      {
        "status": "affected",
        "version": "= 7.0 to 7.02"
      },
      {
        "status": "affected",
        "version": "= 7.10 to 7.11"
      },
      {
        "status": "affected",
        "version": "= 7.30"
      },
      {
        "status": "affected",
        "version": "= 7.31"
      },
      {
        "status": "affected",
        "version": "= 7.40"
      },
      {
        "status": "affected",
        "version": "= 7.50 to 7.53"
      }
    ]
  }
]

Source	Link
wiki	www.wiki.scn.sap.com/wiki/pages/viewpage.action
launchpad	www.launchpad.support.sap.com/
securityfocus	www.securityfocus.com/bid/105904

14 Nov 2018 10:57Current

7.2High risk

Vulners AI Score7.2

EPSS0.00286