CVE-2018-15207

BPC SmartVista 2 has Improper Access Control in the SVFE module, where it fails to appropriately restrict access: a normal user is able to access the…

published April 30, 2019

CVSS
—
EPSS
1%
Percentile
71.3
In the wild
Unconfirmed
What it is

BPC SmartVista 2 has Improper Access Control in the SVFE module, where it fails to appropriately restrict access: a normal user is able to access the SVFE2/pages/finadmin/currconvrate/currconvrate.jsf functionality that should be only accessible to an admin.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01359 · 71.3th percentile
Published
2019-04-30T18:45Z
EPSS history
Timeline
  • 30 APR 18:45Z
    BPC SmartVista 2 has Improper Access Control in the SVFE module, where it fails to appropriately restrict access: a normal user is able to access the…
    cvelistv5