CVE-2018-2481

In some SAP standard roles, in SAP_ABA versions, 7.00 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, 75C to 75D, a transaction code reserved for customer is used. By implementing such transaction code a malicious user may execute unauthorized transaction functionality.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.2 HIGH
NETWORK
LOW
HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
sapCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
VendorProductVersion
sapadvanced_business_application_programming
7.00 ≤
𝑥
≤ 7.02
sapadvanced_business_application_programming
7.10 ≤
𝑥
≤ 7.11
sapadvanced_business_application_programming
7.30
sapadvanced_business_application_programming
7.31
sapadvanced_business_application_programming
7.40
sapadvanced_business_application_programming
7.50
𝑥
= Vulnerable software versions