CVE-2018-2442 vulnerability in SAP Products
Published on August 14, 2018
In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the user session details captured by an HTTP analysis tool could be reused in a HTML page while the user session is still valid.
Products Associated with CVE-2018-2442
stack.watch emails you whenever new vulnerabilities are published in SAP Businessobjects Business Intelligence or SAP Internet Graphics Server. Just hit a watch button to start following.
Affected Versions
SAP BusinessObjects Business Intelligence:- Version 4.0 is affected.
- Version 4.1 is affected.
- Version 4.2 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.