Vulnerability Details CVE-2018-2499
A security weakness in SAP Financial Consolidation Cube Designer (BOBJ_EADES fixed in versions 8.0, 10.1) may allow an attacker to discover the password hash of an admin user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 62.9%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://www.securityfocus.com/bid/106466
- https://launchpad.support.sap.com/#/notes/2699233
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985
- http://www.securityfocus.com/bid/106466
- https://launchpad.support.sap.com/#/notes/2699233
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985
Products affected by CVE-2018-2499
-
cpe:2.3:a:sap:financial_consolidation_cube_designer:10.1
-
cpe:2.3:a:sap:financial_consolidation_cube_designer_bobj_eades:8.0