CVEvulnerability

CVE-2019-0265

4.9 MEDIUM Published 2019-02-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-02-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
4.9 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
Weaknesses
CWE-611

Description

SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Fixed in versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49,KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49. 7.73 KERNEL from 7.21 to 7.22, 7.45, 7.49, 7.53, 7.73, 7.75.

Affected configurations

• sap advanced business application programming platform kernel (>= 7.21 <= 7.22) • sap advanced business application programming platform kernel 7.45 • sap advanced business application programming platform kernel 7.49 • sap advanced business application programming platform kernel 7.53 • sap advanced business application programming platform kernel 7.73 • sap advanced business application programming platform kernel 7.75. • sap advanced business application programming platform krnl32nuc 7.21 • sap advanced business application programming platform krnl32nuc 7.21ext • sap advanced business application programming platform krnl32nuc 7.22 • sap advanced business application programming platform krnl32nuc 7.22ext • sap advanced business application programming platform krnl32uc 7.21 • sap advanced business application programming platform krnl32uc 7.21ext • sap advanced business application programming platform krnl32uc 7.22 • sap advanced business application programming platform krnl32uc 7.22ext • sap advanced business application programming platform krnl64nuc 7.21 • sap advanced business application programming platform krnl64nuc 7.21ext • sap advanced business application programming platform krnl64nuc 7.22 • sap advanced business application programming platform krnl64nuc 7.22ext • sap advanced business application programming platform krnl64nuc 7.49 • sap advanced business application programming platform krnl64uc 7.21 • sap advanced business application programming platform krnl64uc 7.21ext • sap advanced business application programming platform krnl64uc 7.22 • sap advanced business application programming platform krnl64uc 7.22ext • sap advanced business application programming platform krnl64uc 7.49 • sap advanced business application programming platform krnl64uc 7.73

Related

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References