Vulnerabilities > CVE-2018-2499 - Unspecified vulnerability in SAP products
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
A security weakness in SAP Financial Consolidation Cube Designer (BOBJ_EADES fixed in versions 8.0, 10.1) may allow an attacker to discover the password hash of an admin user.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |