[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZXnpSU9uUJxib_ChN0OKfBxwqm6-aDIWjuPxoUczh3w":3,"g5a-risk:CVE-2018-2415":169},{"success":4,"data":5,"meta":167},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":15,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":78,"references":79,"referencesCount":95,"weaknesses":96,"weaknessesCount":105,"isActivelyExploited":106,"cisaInfo":15,"otxData":15,"relatedBlogPosts":107,"seoMetadata":108,"configurations":133,"relatedVendorCves":165,"notableEvents":166},"CVE-2018-2415","What is CVE-2018-2415?","SAP NetWeaver Application Server Java Web Container and HTTP Service (Engine API, from 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; J2EE Engine Server Core 7.11, 7.30, 7.31, 7.40, 7.50) do not sufficiently encode user controlled inputs, resulting in a content spoofing vulnerability when error pages are displayed.","SAP NetWeaver Application Server Java Web Container and HTTP Service (Engine API, from 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; J2EE Engine Server Core 7.11, 7....","2018-05-09T20:29:00.667","2019-10-09T23:40:04.45",4.7,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":34,"CVSSMetricV40":15},null,[17,30],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","REQUIRED","CHANGED","MEDIUM",2.8,1.4,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"cna@sap.com","Secondary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},[35],{"Source":18,"Type":19,"CVSSData":36,"BaseSeverity":27,"ExploitabilityScore":41,"ImpactScore":42,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},{"Version":37,"VectorString":38,"AccessVector":22,"AccessComplexity":27,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":39,"AvailabilityImpact":24,"BaseScore":40,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",4.3,8.6,2.9,0.01124,[43,43,43,43,43,43,43],"Medium",[47,52,55,58,61,64,67,70,72,74,76],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"sap","netweaver_java_web_container_and_http_service_engine","7.10","cpe:2.3:a:sap:netweaver_java_web_container_and_http_service_engine:7.10:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":53,"criteria":54,"vulnerable":4},"7.11","cpe:2.3:a:sap:netweaver_java_web_container_and_http_service_engine:7.11:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":56,"criteria":57,"vulnerable":4},"7.30","cpe:2.3:a:sap:netweaver_java_web_container_and_http_service_engine:7.30:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":59,"criteria":60,"vulnerable":4},"7.31","cpe:2.3:a:sap:netweaver_java_web_container_and_http_service_engine:7.31:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":62,"criteria":63,"vulnerable":4},"7.40","cpe:2.3:a:sap:netweaver_java_web_container_and_http_service_engine:7.40:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":65,"criteria":66,"vulnerable":4},"7.50","cpe:2.3:a:sap:netweaver_java_web_container_and_http_service_engine:7.50:*:*:*:*:*:*:*",{"vendor":48,"product":68,"version":53,"criteria":69,"vulnerable":4},"j2ee_engine_server_core","cpe:2.3:a:sap:j2ee_engine_server_core:7.11:*:*:*:*:*:*:*",{"vendor":48,"product":68,"version":56,"criteria":71,"vulnerable":4},"cpe:2.3:a:sap:j2ee_engine_server_core:7.30:*:*:*:*:*:*:*",{"vendor":48,"product":68,"version":59,"criteria":73,"vulnerable":4},"cpe:2.3:a:sap:j2ee_engine_server_core:7.31:*:*:*:*:*:*:*",{"vendor":48,"product":68,"version":62,"criteria":75,"vulnerable":4},"cpe:2.3:a:sap:j2ee_engine_server_core:7.40:*:*:*:*:*:*:*",{"vendor":48,"product":68,"version":65,"criteria":77,"vulnerable":4},"cpe:2.3:a:sap:j2ee_engine_server_core:7.50:*:*:*:*:*:*:*",11,[80,86,91],{"url":81,"source":82,"tags":83},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F104130","Securityfocus",[84,85],"Third Party Advisory","VDB Entry",{"url":87,"source":88,"tags":89},"https:\u002F\u002Fblogs.sap.com\u002F2018\u002F05\u002F08\u002Fsap-security-patch-day-may-2018\u002F","Sap",[90],"Vendor Advisory",{"url":92,"source":88,"tags":93},"https:\u002F\u002Flaunchpad.support.sap.com\u002F#\u002Fnotes\u002F2550202",[94],"Permissions Required",3,[97],{"id":98,"name":99,"description":100,"extendedDescription":101,"status":102,"abstraction":103,"structure":104},"CWE-172","Encoding Error","The product does not properly encode or decode the data, resulting in unexpected values.","","Draft","Class","Simple",1,false,[],{"title":109,"metaDescription":110,"keywords":111,"canonicalUrl":112,"structuredData":113},"What is CVE-2018-2415? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-2415, a medium severity cyber security vulnerability from 2018. SAP NetWeaver Application Server Java Web Container and HT...","CVE-2018-2415, CVE-2018-2415 vulnerability, CVE-2018-2415 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, sap security, netweaver_java_web_container_and_http_service_engine vulnerability, j2ee_engine_server_core vulnerability","\u002Fwhat-is\u002Fcve-2018-2415",{"@context":114,"@type":115,"headline":109,"description":110,"datePublished":10,"dateModified":11,"author":116,"publisher":120,"about":124,"mainEntityOfPage":128,"articleSection":131,"keywords":132},"https:\u002F\u002Fschema.org","TechArticle",{"@type":117,"name":118,"url":119},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":117,"name":118,"url":119,"logo":121},{"@type":122,"url":123},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":125,"name":6,"description":126,"additionalType":127},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":129,"@id":130},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-2415","Cybersecurity","CVE-2018-2415, CVE-2018-2415 vulnerability, CVE-2018-2415 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[134,151],{"Operator":15,"Negate":15,"Nodes":135},[136],{"Operator":137,"Negate":15,"CPEMatch":138},"OR",[139,141,143,145,147,149],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":140,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"3E0BC4DE-4775-47A9-994A-50D7988C985C",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":142,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D7167F0B-0C1C-4624-A4D5-0133EFCB142E",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":144,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4E7BC134-E387-43D8-B05F-20EA90E4D95A",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":146,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8B8D9985-73BA-47BE-855E-EC5C00E4B1FC",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":148,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1EA345DD-9D93-496C-9B0C-31A37D4D900F",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":150,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"48B78E42-FC8D-4C4B-94CD-8D083406DF72",{"Operator":15,"Negate":15,"Nodes":152},[153],{"Operator":137,"Negate":15,"CPEMatch":154},[155,157,159,161,163],{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":156,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"36870366-7DA1-45F5-82EA-024FBF025CFA",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":158,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A8C1EAF6-BB67-44B3-A6E3-5DB8EE114236",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":160,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"7A334645-13ED-4D2A-A802-7DE6B0C013C3",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":162,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8C374A22-DA62-42E4-A8D9-646DBD575770",{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":164,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"435F8143-1187-4D2C-975E-EC96E580D0B6",[],[],{"lastModified":11,"cacheTime":168,"version":37},1792382269411,{"score":170,"band":171,"action":172,"scoredAt":173},18,"Info","Track","2026-10-16T06:43:59.840837+00:00"]