CVE-2018-2404

MEDIUM

SAP Disclosure Management - Unrestricted File Upload

Title source: rule

SAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format validation.

Core 3

Core References

Permissions Required, Vendor Advisory x_refsource_misc

Vendor Advisory x_refsource_confirm

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

CVSS v3 4.3

EPSS 0.0026

EPSS Percentile 49.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE

CWE-434

Status published

Products (1)

sap/disclosure_management 10.1

Published Apr 10, 2018

Tracked Since Feb 18, 2026