SAP Security Patch Day — April 2018
Tuesday, 10 April 2018
- Vulnerabilities
- 9
- Critical
- 0
- High
- 1
- Zero-days
- 0
- Public exploit
- 0
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
All vulnerabilities 9
High1 ShowHide
Medium7 ShowHide
-
Medium 6.3
CVE-2018-2409 Improper session management when using SAP Cloud Platform 2.0 (Connectivity Service and Cloud Connector). Under certain conditions, data of some other user may…EPSS 1.2%
-
Medium 5.4
CVE-2018-2403 Under certain conditions, SAP Disclosure Management 10.1 allows an attacker to access information which would otherwise be restricted. It is possible for an au…EPSS 1.1%
- Medium 5.4
- Medium 5.4
-
Medium 5.4
CVE-2018-2413 SAP Disclosure Management 10.1 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.EPSS 1.4%
- Medium 5.3
-
Medium 4.3
CVE-2018-2404 SAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format validation.EPSS 1.8%