Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2018-2476 Details

Due to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.31, 7.40, an attacker can redirect users to a malicious site.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:6.1 MEDIUMVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://launchpad.support.sap.com/#/notes/2658755	CVE	Permissions RequiredVendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832	CVE	Vendor Advisory
http://www.securityfocus.com/bid/105898	CVE	Third Party AdvisoryVDB Entry
https://launchpad.support.sap.com/#/notes/2658755	[email protected]	Permissions RequiredVendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832	[email protected]	Vendor Advisory
http://www.securityfocus.com/bid/105898	[email protected]	Third Party AdvisoryVDB Entry

CWE-ID	CWE Name	Source
CWE-601	URL Redirection to Untrusted Site ('Open Redirect')	[email protected]

Product	Versions
sap netweaver	7.30 7.31 7.40
CPE cpe:2.3:a:sap:netweaver:7.30:::::::* cpe:2.3:a:sap:netweaver:7.31:::::::* cpe:2.3:a:sap:netweaver:7.40:::::::* Remediation No remediation found in references.

5 change records found show changes

QUICK INFO