What’s Vulnerable › Vulnerabilities

CVE-2018-2419

• Severity: medium (CVSS 4.6 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-05-09 · updated 2026-06-17
• Weakness: CWE-862

Description

SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Affected products

• SAP Ea-Finserv: 6.04, 6.05, 6.06, 6.16, 6.17, 6.18 (+1)
• SAP S4Core: 1.01, 1.02
• Sapscore: 1.11, 1.12

References

• http://www.securityfocus.com/bid/104116
• https://blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018/
• https://launchpad.support.sap.com/#/notes/2596627
• http://www.securityfocus.com/bid/104116
• https://blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018/
• https://launchpad.support.sap.com/#/notes/2596627

Get alerted when CVE-2018-2419 or the next vulnerability affects your stack