What’s Vulnerable › Vulnerabilities

CVE-2018-15207

• Severity: high (CVSS 7.2 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-04-30 · updated 2026-06-17
• Weakness: CWE-269

Description

BPC SmartVista 2 has Improper Access Control in the SVFE module, where it fails to appropriately restrict access: a normal user is able to access the SVFE2/pages/finadmin/currconvrate/currconvrate.jsf functionality that should be only accessible to an admin.

Affected products

• Bpcbt Smartvista: 2

References

• https://neetech18.blogspot.com/2019/03/incorrect-access-control-smart-vista.html
• https://neetech18.blogspot.com/2019/03/incorrect-access-control-smart-vista.html

Get alerted when CVE-2018-15207 or the next vulnerability affects your stack