SAP Security Patch Day — March 2018
Tuesday, 13 March 2018
- Vulnerabilities
- 7
- Critical
- 0
- High
- 1
- Zero-days
- 0
- Public exploit
- 0
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
All vulnerabilities 7
High1 ShowHide
Medium5 ShowHide
- Medium 6.7
-
Medium 6.1
CVE-2018-2399 Cross-Site Scripting in Process Monitoring Infrastructure, from 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, due to inefficient encoding of user controlled inpu…EPSS 1.3%
- Medium 5.4
-
Medium 5.4
CVE-2018-2401 SAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External …EPSS 1.6%
-
Medium 4.3
CVE-2018-2366 SAP Business Process Automation (BPA) By Redwood, 9.0, 9.1, allows an attacker to exploit insufficient validation of path information provided by users, thus c…EPSS 1.5%