CVE-2018-2450

SAP MaxDB (liveCache), versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and therefore read, modify or delete sensitive data from database.

Score

CVSS 3.0 7.2 High

Status

Modified - cna@sap.com

Published

2018-08-14

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Maxdb (Sap)
• Sap Maxdb Livecache (Sap)

References

• http://www.securityfocus.com/bid/105063
• https://launchpad.support.sap.com/#/notes/2660005
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742