CVE-2018-2370: SAP BI Launchpad

Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Server Side Request Forgery (SSRF) vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allow a malicious user to use common techniques to determine which ports are in use on the backend server.

Affected products

• SAP BI Launchpad: version 4.10 only; version 4.20 only; version 4.30 only

Published 2018-02-14. Last modified 2026-06-17.