CVE-2018-2446

—

CVSS 3.1

7.5 high

EPSS

2%p76

Published

Aug 14, 2018 (Aug 14, 2018)

Modified

Jun 17, 2026

Description

Admin tools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allow an unauthenticated user to read sensitive information (server name), hence leading to an information disclosure.

Vendors: sap
Products: businessobjects business intelligence
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.