SAP Ea-Finserv vulnerabilities

2 CVEs affecting SAP Ea-Finserv, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-2484, published 2019-01-08.

More from SAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-2484, published 2019-01-08. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. SAP Enterprise Financial Services (fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0; Bank/CFM 4.63_20) does…
• CVE-2018-2419, published 2018-05-09. Medium severity, CVSS 4.6. EPSS: 0.8% chance of exploitation in the next 30 days. SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for an authenticated…