CVE-2018-2441

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-08-14 · updated 2026-06-17

Description

Under certain conditions the SAP Change and Transport System (ABAP), SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49, 7.53 and 7.73, allows an attacker to transport information which would otherwise be restricted.

Affected products

SAP Startup Service: 7.21, 7.21ext, 7.22, 7.22ext, 7.45, 7.49 (+2)

References

http://www.securityfocus.com/bid/105090
https://launchpad.support.sap.com/#/notes/2671160
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
http://www.securityfocus.com/bid/105090
https://launchpad.support.sap.com/#/notes/2671160
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742

Get alerted when CVE-2018-2441 or the next vulnerability affects your stack