NetSight
high7.2

CVE-2018-2481

In some SAP standard roles, in SAP_ABA versions, 7.00 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, 75C to 75D, a transaction code reserved for customer is us…

Impact

In some SAP standard roles, in SAP_ABA versions, 7.00 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, 75C to 75D, a transaction code reserved for customer is used. By implementing such transaction code a malicious user may execute unauthorized transaction functionality.

Affected products

VendorProductAffected versions
SapAdvanced Business Application Programming
from 7.00 through 7.02
from 7.10 through 7.11
Versions 7.30, 7.31, 7.40, 7.50

Weakness classification

References