CVE-2018-2467: Medium severity sap businessobjects business intelligence platform vulnerability

Published Oct 9, 2018
·
Updated

In the Software Development Kit in SAP BusinessObjects BI Platform Servers, versions 4.1 and 4.2, using the specially crafted URL in a Web Browser such as Chrome the system returns an error with the path of the used application server.

Affected Software

2 affected components
SAP BusinessObjects BI Platform=4.1
SAP BusinessObjects BI Platform=4.2

Event History

Oct 9, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionWeakness

Frequently Asked Questions

1

What is the severity of CVE-2018-2467?

CVE-2018-2467 is considered a high-severity vulnerability due to the potential risk of disclosing sensitive information.

2

How do I fix CVE-2018-2467?

To remediate CVE-2018-2467, it is recommended to update your SAP BusinessObjects BI Platform to the latest version.

3

Which versions of SAP BusinessObjects BI Platform are affected by CVE-2018-2467?

CVE-2018-2467 affects SAP BusinessObjects BI Platform versions 4.1 and 4.2.

4

What type of information is exposed by CVE-2018-2467?

CVE-2018-2467 can expose the application server path through specially crafted URLs.

5

Is there a workaround for CVE-2018-2467?

Currently, applying the latest security patches is the recommended approach as no specific workaround is documented for CVE-2018-2467.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203