CVE-2018-2492

Publication date

2018-12-11 23:00:00

Family

sap

State

PUBLISHED

Description

SAML 2.0 functionality in SAP NetWeaver AS Java, does not sufficiently validate XML documents received from an untrusted source. This is fixed in versions 7.2, 7.30, 7.31, 7.40 and 7.50.