CVE-2018-2492

Description

SAML 2.0 functionality in SAP NetWeaver AS Java, does not sufficiently validate XML documents received from an untrusted source. This is fixed in versions 7.2, 7.30, 7.31, 7.40 and 7.50.

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=508559699

https://launchpad.support.sap.com/#/notes/2642680

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-14347

http://www.securityfocus.com/bid/106153

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS