AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-2449

HIGH · CVSS 8.6 EPSS 1.62%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-08-14 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.6. It affects Windows.

CVE
CVE-2018-2449
Severity
HIGH
CVSS
8.6
EPSS
1.62%
Windows

Original NVD Description

SAP SRM MDM Catalog versions 3.73, 7.31, 7.32 in (SAP NetWeaver 7.3) - import functionality does not perform authentication checks for valid repository user. This is an unauthenticated functionality that you can use on windows machines to do SMB relaying.

Related CVEs

Other vulnerabilities affecting the same vendor(s)