CVE-2018-2428

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-06-12 · updated 2026-06-17

Description

Under certain conditions SAP UI5 Handler allows an attacker to access information which would otherwise be restricted. Software components affected are: SAP Infrastructure 1.0, SAP UI 7.4, 7.5, 7.51, 7.52 and version 2.0 of SAP UI for SAP NetWeaver 7.00.

Affected products

SAP Infrastructure: 1.0
SAP_SE SAP UI5 Variant Management: 2.0, 7.4, 7.5, 7.51, 7.52

References

http://www.securityfocus.com/bid/104446
https://launchpad.support.sap.com/#/notes/2621121
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=495289255
http://www.securityfocus.com/bid/104446
https://launchpad.support.sap.com/#/notes/2621121
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=495289255

Get alerted when CVE-2018-2428 or the next vulnerability affects your stack