Security Advisory
CVE-2018-2504
6.1
MEDIUM
Vulnerability Description
SAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host header which can result in HTTP Host Header Manipulation or Cross-Site Scripting (XSS) vulnerability. This is fixed in versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50.
Published Date
December 11, 2018
Official Source
NIST NVD Advisory