CVE-2018-2432

EPSS 0.7%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

10 Jul 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

SAP BusinessObjects Business Intelligence (BI Launchpad and Central Management Console) versions 4.10, 4.20 and 4.30 allow an attacker to include invalidated data in the HTTP response header sent to a Web user. Successful exploitation of this vulnerability may lead to advanced attacks, including: cross-site scripting and page hijacking.

Affected products

SAP · SAP BusinessObjects Business Intelligence (BI Launchpad and Central Management Console)

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://launchpad.support.sap.com/#/notes/2523290 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000 http://www.securityfocus.com/bid/104716