Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-2462

In certain cases, BEx Web Java Runtime Export Web Service in SAP NetWeaver BI 7.30, 7.31. 7.40, 7.41, 7.50, does not sufficiently validate an XML document accepted from an untruste

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

In certain cases, BEx Web Java Runtime Export Web Service in SAP NetWeaver BI 7.30, 7.31. 7.40, 7.41, 7.50, does not sufficiently validate an XML document accepted from an untrusted source.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SAP NetWeaver BI

  • = 7.30affected
  • = 7.31affected
  • = 7.40affected
  • = 7.41affected
  • = 7.50affected

References