Database Manipulation Vulnerability in SAP MaxDB Products
CVE-2018-2450

7.2HIGH

Key Information:

Vendor

SAP
Status
SAP Maxdb (livecache)
Vendor
CVE Published:
14 August 2018

What is CVE-2018-2450?

A vulnerability in SAP MaxDB (liveCache) occurs when an attacker, gaining DBM operator privileges, can execute specially crafted SQL queries. This exploitation can lead to unauthorized reading, modification, or deletion of sensitive data stored within the database, posing significant risks to data integrity and confidentiality.

Affected Version(s)

SAP MaxDB (liveCache) 7.8

SAP MaxDB (liveCache) 7.9

References

https://launchpad.support.sap.com/#/notes/2660005
x_refsource_MISC
http://www.securityfocus.com/bid/105063
vdb-entryx_refsource_BID
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.