CVE-2018-2409

CVSS 3.0: 8.8 high
EPSS: 1%p67
Published: Apr 10, 2018 · Apr 10, 2018
Modified: Jun 17, 2026

Analyze CVE-2018-2409 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Improper session management when using SAP Cloud Platform 2.0 (Connectivity Service and Cloud Connector). Under certain conditions, data of some other user may be shown or modified when using an application built on top of SAP Cloud Platform.

Vendors: sap

Products: cloud platform

Weakness: CWE-384

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news

1 story

SAP April 2018 Security Patch Day address critical flaws in web browser controls in SAP Business Client

Security AffairsApr 12, 06:14 UTC · Apr 12, 2018VulnerabilityCVE-2017-7668 CVE-2018-2408 CVE-2018-2409+82 · 1 read