CVE-2018-2504

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

SAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host header which can result in HTTP Host Header Manipulation or Cross-Site Scripting (XSS) vulnerability. This is fixed in versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
SAP	SAP NetWeaver AS Java (ServerCore)	= 7.10; = 7.11; = 7.20; = 7.30; = 7.31; = 7.40; = 7.50

References

http://www.securityfocus.com/bid/106150Third Party Advisory, VDB Entry
https://launchpad.support.sap.com/#/notes/2718993Permissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=508559699Vendor Advisory
http://www.securityfocus.com/bid/106150Third Party Advisory, VDB Entry
https://launchpad.support.sap.com/#/notes/2718993Permissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=508559699Vendor Advisory

Timeline

Published: Dec 11, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-250408.8A vulnerability was found in uTorrent Web. It has been declared as critical. Affected by this vulnerability is an unknown functionality of t CVE-2018-250418.8A vulnerability was found in uTorrent. It has been rated as critical. Affected by this issue is some unknown functionality of the component CVE-2018-250428.8A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption CVE-2018-250438.8A vulnerability classified as critical was found in uTorrent. This vulnerability affects unknown code of the component PRNG. The manipulatio CVE-2018-250448.8A vulnerability, which was classified as critical, has been found in uTorrent. This issue affects some unknown processing of the component G CVE-2018-250456.1Django REST framework (aka django-rest-framework) before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoe CVE-2018-250469.1Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the tar CVE-2018-250475.4In Smarty before 3.1.47 and 4.x before 4.2.1, libs/plugins/function.mailto.php allows XSS. A web page that uses smarty_function_mailto, and CVE-2018-250488.8The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and CVE-2018-250497.5A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the CVE-2018-25056.1SAP Commerce does not sufficiently validate user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability in storefronts tha CVE-2018-250506.1A vulnerability, which was classified as problematic, has been found in Harvest Chosen up to 1.8.6. Affected by this issue is the function A