Vulnerability Details CVE-2018-2483
HTTP Verb Tampering is possible in SAP BusinessObjects Business Intelligence Platform, versions 4.1 and 4.2, Central Management Console (CMC) by changing request method.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.2%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 4.0
References
- http://www.securityfocus.com/bid/105899
- https://launchpad.support.sap.com/#/notes/2647714
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832
- http://www.securityfocus.com/bid/105899
- https://launchpad.support.sap.com/#/notes/2647714
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832
Products affected by CVE-2018-2483
-
cpe:2.3:a:sap:businessobjects_business_intelligence:4.1
-
cpe:2.3:a:sap:businessobjects_business_intelligence:4.2