CVE-2018-2416: SAP Identity Management

Medium severity, CVSS 5.4. EPSS: 1.5% chance of exploitation in the next 30 days.

SAP Identity Management 7.2 and 8.0 do not sufficiently validate an XML document accepted from an untrusted source.

Affected products

• SAP Identity Management: version 7.2 only; version 8.0 only

Published 2018-05-09. Last modified 2026-06-17.