Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2018-2502

UNKNOWN
Published 2018-12-11T23:00:00
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2018-2502. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

TRACE method is enabled in SAP Business One Service Layer . Attacker can use XST (Cross Site Tracing) attack if frontend applications that are using Service Layer has a XSS vulnerability. This has been fixed in SAP Business One Service Layer (B1_ON_HANA, versions 9.2, 9.3).

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

SAP

SAP Business One Service Layer (B1_ON_HANA)

Affected Versions:

= 9.2 = 9.3

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed MODERATE

GHSA-hjc3-4rh8-3fpv

Advisory Details

TRACE method is enabled in SAP Business One Service Layer . Attacker can use XST (Cross Site Tracing) attack if frontend applications that are using Service Layer has a XSS vulnerability. This has been fixed in SAP Business One Service Layer (B1_ON_HANA, versions 9.2, 9.3).

CVSS Scoring

CVSS Score

5.0

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2018-2502
WEB https://launchpad.support.sap.com/#/notes/2680492
WEB https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=508559699
WEB http://www.securityfocus.com/bid/106173

Advisory provided by GitHub Security Advisory Database. Published: May 14, 2022, Modified: May 14, 2022

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=508559699
http://www.securityfocus.com/bid/106173
https://launchpad.support.sap.com/#/notes/2680492
Published: 2018-12-11T23:00:00
Last Modified: 2024-08-05T04:21:34.181Z
Copied to clipboard!