CVEvulnerability

CVE-2019-0304

9.8 CRITICAL Published 2019-06-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-06-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-74

Description

FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, allows an attacker to inject code or specifically manipulated command that can be executed by the application. An attacker could thereby control the behaviour of the application.

Affected configurations

• sap advanced business application programming platform kernel 7.21 • sap advanced business application programming platform kernel 7.45 • sap advanced business application programming platform kernel 7.49 • sap advanced business application programming platform kernel 7.53 • sap advanced business application programming platform kernel 7.73 • sap advanced business application programming platform krnl32nuc 7.21 • sap advanced business application programming platform krnl32nuc 7.21ext • sap advanced business application programming platform krnl32nuc 7.22 • sap advanced business application programming platform krnl32nuc 7.22ext • sap advanced business application programming platform krnl32uc 7.21 • sap advanced business application programming platform krnl32uc 7.21ext • sap advanced business application programming platform krnl32uc 7.22 • sap advanced business application programming platform krnl32uc 7.22ext • sap advanced business application programming platform krnl64nuc 7.21 • sap advanced business application programming platform krnl64nuc 7.21ext • sap advanced business application programming platform krnl64nuc 7.22 • sap advanced business application programming platform krnl64nuc 7.22ext • sap advanced business application programming platform krnl64nuc 7.49 • sap advanced business application programming platform krnl64uc 7.21 • sap advanced business application programming platform krnl64uc 7.21ext • sap advanced business application programming platform krnl64uc 7.22 • sap advanced business application programming platform krnl64uc 7.22ext • sap advanced business application programming platform krnl64uc 7.49 • sap advanced business application programming platform krnl64uc 7.73

Related

Weakness · CWE (1)

  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness

References