CVE-2018-2404

SAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format validation

Medium · published April 10, 2018

CVSS v3.0
4.3
EPSS
2%
Percentile
78.8
In the wild
Unconfirmed
What it is

SAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format validation.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01846 · 78.8th percentile
Published
2018-04-10T15:00Z
EPSS history
Timeline
  • 10 APR 15:00Z
    SAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format validation
    cvelistv5