Vulnerability Details CVE-2018-2474
SAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2) application allows an attacker to trick an authenticated user to send unintended request to the web server. This vulnerability is due to insufficient CSRF protection.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.4%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.3
References
- http://www.securityfocus.com/bid/105534
- https://launchpad.support.sap.com/#/notes/2696889
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095
- http://www.securityfocus.com/bid/105534
- https://launchpad.support.sap.com/#/notes/2696889
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095