What’s Vulnerable › Vulnerabilities

CVE-2018-2362

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-01-09 · updated 2026-06-17

Description

A remote unauthenticated attacker, SAP HANA 1.00 and 2.00, could send specially crafted SOAP requests to the SAP Startup Service and disclose information such as the platform's hostname.

Affected products

• SAP SE SAP HANA: 1.00, 2.00

References

• http://www.securityfocus.com/bid/102452
• https://blogs.sap.com/2018/01/09/sap-security-patch-day-january-2018/
• https://launchpad.support.sap.com/#/notes/2575750
• http://www.securityfocus.com/bid/102452
• https://blogs.sap.com/2018/01/09/sap-security-patch-day-january-2018/
• https://launchpad.support.sap.com/#/notes/2575750

Get alerted when CVE-2018-2362 or the next vulnerability affects your stack