CVE-2018-2492

SAML 2.0 functionality in SAP NetWeaver AS Java, does not sufficiently validate XML documents received from an untrusted source. This is fixed in versions 7.2, 7.30, 7.31, 7.40 and 7.50.

Score

CVSS 3.1 7.1 High

Status

Modified - cna@sap.com

Published

2018-12-11

Last modified

2024-08-05

Weaknesses

CWE-112, CWE-611

Affected products

• Netweaver Application Server Java (Sap)
• Sap Netweaver Application Server Java Library (Sap)

References

• http://www.securityfocus.com/bid/106153
• https://launchpad.support.sap.com/#/notes/2642680
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=508559699