Skip to content
OpenAdvisories
Unscored CVE-2018-2381 EUVD-2018-14236GHSA-mvxp-973j-8w5f

SAP ERP Financials Information System (SAP_APPL 6.00, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16; SAP_FIN 6.17, 6.18, 7.00, 7.20, 7.30 S4CORE 1.00,…

Published Feb 14, 2018 · Updated Aug 5, 2024 · Assigned by sap

Description

SAP ERP Financials Information System (SAP_APPL 6.00, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16; SAP_FIN 6.17, 6.18, 7.00, 7.20, 7.30 S4CORE 1.00, 1.01, 1.02) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Affected products

VendorProductAffectedFixed
SAP SE SAP ERP Financials Information System 2.00 —

References