CVE-2018-2445 AdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to manipulate the vulnerable application to send crafted requests on behalf of the application, resulting...
CriticalCVSS 9.6
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
AdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to manipulate the vulnerable application to send crafted requests on behalf of the application, resulting in a Server-Side Request Forgery (SSRF) vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap businessobjects business intelligence | = 4.1 | No fix listed |
| sap businessobjects business intelligence | = 4.2 | No fix listed |
| SAP BusinessObjects Business Intelligence Platform | = 4.1 | No fix listed |
| SAP BusinessObjects Business Intelligence Platform | = 4.2 | No fix listed |
References
- 105064 third-party-advisory vdb-entry
- launchpad.support.sap.com permissions-required vendor-advisory
- wiki.scn.sap.com vendor-advisory