CVE-2018-2483

EUVD-2018-14338
HTTP Verb Tampering is possible in SAP BusinessObjects Business Intelligence Platform, versions 4.1 and 4.2, Central Management Console (CMC) by changing request method.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 36%
Affected Products (NVD)
VendorProductVersion
sapbusinessobjects_business_intelligence
4.1
sapbusinessobjects_business_intelligence
4.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/105899
https://launchpad.support.sap.com/#/notes/2647714
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832
http://www.securityfocus.com/bid/105899
https://launchpad.support.sap.com/#/notes/2647714
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832