CVEvulnerability

CVE-2018-2481

7.2 HIGH Published 2018-11-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-11-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.2 HIGH — CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-269

Description

In some SAP standard roles, in SAP_ABA versions, 7.00 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, 75C to 75D, a transaction code reserved for customer is used. By implementing such transaction code a malicious user may execute unauthorized transaction functionality.

Affected configurations

• sap advanced business application programming (>= 7.00 <= 7.02) • sap advanced business application programming (>= 7.10 <= 7.11) • sap advanced business application programming 7.30 • sap advanced business application programming 7.31 • sap advanced business application programming 7.40 • sap advanced business application programming 7.50 • sap advanced business application programming 75c • sap advanced business application programming 75d

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References