8.4

CVE-2018-2425

Under certain conditions, SAP Business One, 9.2, 9.3, for SAP HANA backup service allows an attacker to access information which would otherwise be restricted.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SAPBusiness One Version9.2 SwPlatformsap_hana
SAPBusiness One Version9.3 SwPlatformsap_hana
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.4% 0.318
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
cna@sap.com 8.4 2.5 5.9
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=495289255
Vendor Advisory
http://www.securityfocus.com/bid/104438
Third Party Advisory
VDB Entry
https://launchpad.support.sap.com/#/notes/2588475
Vendor Advisory
Issue Tracking
Permissions Required