CVE-2018-2476
CVE-2018-2476
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
13 Nov 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Due to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.31, 7.40, an attacker can redirect users to a malicious site.
Affected products
SAP · SAP NetWeaver (forums)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →