AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-2419

LOW · CVSS 3.7 EPSS 0.86%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-05-09 · Last synced 2026-08-04

CyberRota Analysis

This is a low severity vulnerability with a CVSS score of 3.7. Exploitation may require the attacker to be authenticated.

CVE
CVE-2018-2419
Severity
LOW
CVSS
3.7
EPSS
0.86%

Original NVD Description

SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Related CVEs

Other vulnerabilities affecting the same vendor(s)