CVE-2018-2502

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

TRACE method is enabled in SAP Business One Service Layer . Attacker can use XST (Cross Site Tracing) attack if frontend applications that are using Service Layer has a XSS vulnerability. This has been fixed in SAP Business One Service Layer (B1_ON_HANA, versions 9.2, 9.3).

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
SAP	SAP Business One Service Layer (B1_ON_HANA)	= 9.2; = 9.3

References

http://www.securityfocus.com/bid/106173Third Party Advisory, VDB Entry
https://launchpad.support.sap.com/#/notes/2680492Permissions Required, Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=508559699Vendor Advisory
http://www.securityfocus.com/bid/106173Third Party Advisory, VDB Entry
https://launchpad.support.sap.com/#/notes/2680492Permissions Required, Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=508559699Vendor Advisory

Timeline

Published: Dec 11, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-250207.8The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructio CVE-2018-250217.5The TCP Server module in toxcore before 0.2.8 doesn't free the TCP priority queue under certain conditions, which allows a remote attacker t CVE-2018-250223.1The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a ta CVE-2018-250237.5An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a referenc CVE-2018-250249.8An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly coerce an immutable reference into a mutable referen CVE-2018-250259.8An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly extend the lifetime of a string, leading to memory c CVE-2018-250269.8An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can add the Send marker trait to an object that cannot be sent bet CVE-2018-250277.5An issue was discovered in the libpulse-binding crate before 1.2.1 for Rust. get_format_info can cause a use-after-free.CVE-2018-250287.5An issue was discovered in the libpulse-binding crate before 1.2.1 for Rust. get_context can cause a use-after-free.CVE-2018-250298.1The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an attacker within radio CVE-2018-25037.4By default, the SAP NetWeaver AS Java keystore service does not sufficiently restrict the access to resources that should be protected. This CVE-2018-250302.5A vulnerability classified as problematic has been found in Mirmay Secure Private Browser and File Manager up to 2.5. Affected is the Auto L