CVEvulnerability
CVE-2018-2418
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-05-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-94
Description
SAP MaxDB ODBC driver (all versions before 7.9.09.07) allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
Affected configurations
• sap maxdb odbc driver (< 7.9.09.07)
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://www.securityfocus.com/bid/104115 Third Party Advisory, VDB Entry
- https://blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018/ Vendor Advisory
- https://launchpad.support.sap.com/#/notes/2610231 Permissions Required, Vendor Advisory
- http://www.securityfocus.com/bid/104115 Third Party Advisory, VDB Entry
- https://blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018/ Vendor Advisory
- https://launchpad.support.sap.com/#/notes/2610231 Permissions Required, Vendor Advisory