CVE-2018-2471

—

CVSS 3.0

7.5 high

EPSS

2%p76

Published

Oct 9, 2018 (Oct 9, 2018)

Modified

Jun 17, 2026

Description

Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which would otherwise be restricted.

Vendors: sap
Products: businessobjects business intelligence platform
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news1 stories

SAP October patches fixe the first Hot News note for BusinessObjects

Security AffairsOct 11, 05:40 UTC · Oct 11, 2018Vulnerability CVE-2018-2471 CVE-2018-2475 CVE-2018-12585+10 CVEs