CVE-2018-2450 SAP MaxDB (liveCache), versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and therefore read, modify or delete sensitive data from database.
HighCVSS 7.2
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SAP MaxDB (liveCache), versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and therefore read, modify or delete sensitive data from database.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap maxdb | = 7.8 | No fix listed |
| sap maxdb | = 7.9 | No fix listed |
| SAP MaxDB (liveCache) | = 7.8 | No fix listed |
| SAP MaxDB (liveCache) | = 7.9 | No fix listed |
References
- 105063 third-party-advisory vdb-entry
- launchpad.support.sap.com permissions-required vendor-advisory
- wiki.scn.sap.com vendor-advisory