[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXMZYucVsHZz1a29rXhSjGdOg8jzplXsHNj5ZleDPoxk":3,"g5a-risk:CVE-2018-2403":117},{"success":4,"data":5,"meta":115},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":15,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":56,"references":57,"referencesCount":73,"weaknesses":74,"weaknessesCount":56,"isActivelyExploited":78,"cisaInfo":15,"otxData":15,"relatedBlogPosts":79,"seoMetadata":80,"configurations":105,"relatedVendorCves":113,"notableEvents":114},"CVE-2018-2403","What is CVE-2018-2403?","Under certain conditions, SAP Disclosure Management 10.1 allows an attacker to access information which would otherwise be restricted. It is possible for an authorized user to get SAP Disclosure Management to point a specific chapter type to a chapter the user has not been given access to.","Under certain conditions, SAP Disclosure Management 10.1 allows an attacker to access information which would otherwise be restricted. It is possible for an ...","2018-04-10T15:29:01.19","2020-08-24T17:37:01.14",6.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":37,"CVSSMetricV40":15},null,[17,30],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",2.8,3.6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":36},"cna@sap.com","Secondary",{"Version":21,"VectorString":34,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",5.4,2.5,[38],{"Source":18,"Type":19,"CVSSData":39,"BaseSeverity":27,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":40,"VectorString":41,"AccessVector":22,"AccessComplexity":23,"Authentication":42,"ConfidentialityImpact":43,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":44,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","SINGLE","PARTIAL",4,8,2.9,0.01132,[47,47,47,47,47,47,47],"Medium",[51],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"sap","disclosure_management","10.1","cpe:2.3:a:sap:disclosure_management:10.1:*:*:*:*:*:*:*",1,[58,64,69],{"url":59,"source":60,"tags":61},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F103727","Securityfocus",[62,63],"Third Party Advisory","VDB Entry",{"url":65,"source":66,"tags":67},"https:\u002F\u002Fblogs.sap.com\u002F2018\u002F04\u002F10\u002Fsap-security-patch-day-april-2018\u002F","Sap",[68],"Vendor Advisory",{"url":70,"source":66,"tags":71},"https:\u002F\u002Flaunchpad.support.sap.com\u002F#\u002Fnotes\u002F2595800",[72],"Permissions Required",3,[75],{"id":76,"name":76,"description":77},"Unknown","NVD-CWE-noinfo",false,[],{"title":81,"metaDescription":82,"keywords":83,"canonicalUrl":84,"structuredData":85},"What is CVE-2018-2403? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-2403, a medium severity cyber security vulnerability from 2018. Under certain conditions, SAP Disclosure Management 10.1 a...","CVE-2018-2403, CVE-2018-2403 vulnerability, CVE-2018-2403 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, sap security, disclosure_management vulnerability","\u002Fwhat-is\u002Fcve-2018-2403",{"@context":86,"@type":87,"headline":81,"description":82,"datePublished":10,"dateModified":11,"author":88,"publisher":92,"about":96,"mainEntityOfPage":100,"articleSection":103,"keywords":104},"https:\u002F\u002Fschema.org","TechArticle",{"@type":89,"name":90,"url":91},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":89,"name":90,"url":91,"logo":93},{"@type":94,"url":95},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":97,"name":6,"description":98,"additionalType":99},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":101,"@id":102},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-2403","Cybersecurity","CVE-2018-2403, CVE-2018-2403 vulnerability, CVE-2018-2403 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[106],{"Operator":15,"Negate":15,"Nodes":107},[108],{"Operator":109,"Negate":15,"CPEMatch":110},"OR",[111],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":112,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"53067DD8-3718-46AE-AA69-2065C07F5EEF",[],[],{"lastModified":11,"cacheTime":116,"version":40},1792372356074,{"score":118,"band":119,"action":120,"scoredAt":121},23,"Low","Monitor","2026-10-16T06:43:48.122856+00:00"]