Vulnerabilities > CVE-2018-2448 - Unspecified vulnerability in SAP Supplier Relationship Management MDM Catalog 3.0/7.01/7.02

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
sap
NVD
Published: 2018-08-14
Updated: 2024-11-21

Summary

Under certain conditions SAP SRM-MDM (CATALOG versions 3.0, 7.01, 7.02) utilities functionality allows an attacker to access information of user existence which would otherwise be restricted.

Vulnerable Configurations

Part Description Count
Application
Sap
3

References