Vulnerability Intelligence Report
CVE-2018-2428
Under certain conditions SAP UI5 Handler allows an attacker to access information which would otherwise be restricted. Software components affected are: SAP Infrastructure 1.0, SAP UI 7.4, 7.5, 7.51, 7.52 and version 2.0 of SAP UI for SAP NetWeaver 7.00.
No Active Exploit Signals
CVSS Base Score
5.3
MEDIUM
Exploitability:3.9
Impact Score:1.5
EPSS Probability:1.76%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| SAP SE | SAP Infrastructure | 1.0 (affected) |
| SAP SE | SAP UI | 7.4 (affected), 7.5 (affected), 7.51 (affected), 7.52 (affected) |
| SAP SE | SAP UI for SAP NetWeaver 7.00 | 2.0 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
1.759%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | SAP SE · Vendor · Germany |
| Reserved | 2017-12-15T00:00:00 |
| Published | 2018-06-12T15:00:00 |
| Patch Date | 2018-06-12 |
| Last Updated | 2024-08-05T04:21:33 |
Community Chatter & Buzz