Is CVE-2018-15207 actively exploited?

No active exploitation of CVE-2018-15207 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2018-15207 be exploited remotely?

Yes. CVE-2018-15207 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2018-15207?

CVE-2018-15207 has a CVSS score of 7.2 (HIGH).

HOME VULNERABILITIESCVE-2018-15207

HIGH

CVE-2018-15207

CWE-269Published: April 30, 2019· Updated: Jun 17, 2026

7.2

CVSS v3.1

Official Description

BPC SmartVista 2 has Improper Access Control in the SVFE module, where it fails to appropriately restrict access: a normal user is able to access the SVFE2/pages/finadmin/currconvrate/currconvrate.jsf functionality that should be only accessible to an admin.

NVD Source

Technical Analysis

CVE-2018-15207 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.2.