CVE-2018-2481
7.2HIGH
Summary
In some SAP standard roles, in SAP_ABA versions, 7.00 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, 75C to 75D, a transaction code reserved for customer is used. By implementing such transaction code a malicious user may execute unauthorized transaction functionality.
Affected Version(s)
SAP_ABA = 7.00 to 7.02 = 7.00 to 7.02
SAP_ABA = 7.10 to 7.11 = 7.10 to 7.11
SAP_ABA = 7.30 = 7.30
References
CVSS V3.1
Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved