CVE-2018-2470

MEDIUM · CVSS 6.1 EPSS 1.32%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-10-09 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2018-2470

Severity

MEDIUM

CVSS

6.1

EPSS

1.32%

Original Filing — NVD Description

In SAP NetWeaver Application Server for ABAP, from 7.0 to 7.02, 7.30, 7.31, 7.40 and from 7.50 to 7.53, applications do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.