{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T06:08:59.236","vulnerabilities":[{"cve":{"id":"CVE-2018-2403","sourceIdentifier":"cna@sap.com","published":"2018-04-10T15:29:01.190","lastModified":"2026-06-17T01:55:38.737","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Under certain conditions, SAP Disclosure Management 10.1 allows an attacker to access information which would otherwise be restricted. It is possible for an authorized user to get SAP Disclosure Management to point a specific chapter type to a chapter the user has not been given access to."},{"lang":"es","value":"En ciertas condiciones, SAP Disclosure Management 10.1 permite que un atacante acceda a información que normalmente estaría restringida. Es posible para un usuario autorizado hacer que SAP Disclosure Management señale un tipo de capítulo en concreto en un capítulo al cual el usuario no tiene permiso de acceso."}],"affected":[{"source":"cna@sap.com","affectedData":[{"vendor":"SAP SE","product":"SAP Disclosure Management","versions":[{"version":"10.1","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"cna@sap.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:disclosure_management:10.1:*:*:*:*:*:*:*","matchCriteriaId":"53067DD8-3718-46AE-AA69-2065C07F5EEF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/103727","source":"cna@sap.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/","source":"cna@sap.com","tags":["Vendor Advisory"]},{"url":"https://launchpad.support.sap.com/#/notes/2595800","source":"cna@sap.com","tags":["Permissions Required"]},{"url":"http://www.securityfocus.com/bid/103727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://launchpad.support.sap.com/#/notes/2595800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]}]}}]}