CVE-2018-2404: Malicious File Upload
SAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format validation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-2404?
The severity of CVE-2018-2404 is critical, with a severity score of 9.8.
What is the affected software for CVE-2018-2404?
The affected software is SAP Disclosure Management 10.1.
How does CVE-2018-2404 affect the affected software?
CVE-2018-2404 allows an attacker to upload any file without proper file format validation in SAP Disclosure Management 10.1.
Is there a fix available for CVE-2018-2404?
Yes, a security patch is available for CVE-2018-2404. Please refer to the SAP Security Patch Day April 2018 for more information.
Where can I find more information about CVE-2018-2404?
You can find more information about CVE-2018-2404 on the following links: [SecurityFocus](http://www.securityfocus.com/bid/103727), [SAP Blogs](https://blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/), [SAP Support Notes](https://launchpad.support.sap.com/#/notes/2607052).