CVE Vulnerabilities

CVE-2018-2398

Published: Mar 14, 2018 | Modified: May 27, 2025
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Under certain conditions SAP Business Client 6.5 allows an attacker to access information which would otherwise be restricted.

Affected Software

NameVendorStart VersionEnd Version
Business_clientSap6.5 (including)6.5 (including)
Business_clientSap6.5-patch_level1 (including)6.5-patch_level1 (including)
Business_clientSap6.5-patch_level2 (including)6.5-patch_level2 (including)
Business_clientSap6.5-patch_level3 (including)6.5-patch_level3 (including)
Business_clientSap6.5-patch_level4 (including)6.5-patch_level4 (including)

References