CVE-2018-2461

—

CVSS 3.0

8.8 high

EPSS

1%p69

Published

Sep 11, 2018 (Sep 11, 2018)

Modified

Jun 17, 2026

Description

Missing authorization check in SAP HCM Fiori "People Profile" (GBX01 HR version 6.0) for an authenticated user which may result in an escalation of privileges.

Vendors: sap
Products: people profile
Weakness: CWE-862
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.