CVEvulnerability
CVE-2019-0319
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-07-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-74, CWE-79
Description
The SAP Gateway, versions 7.5, 7.51, 7.52 and 7.53, allows an attacker to inject content which is displayed in the form of an error message. An attacker could thus mislead a user to believe this information is from the legitimate service when it's not.
Affected configurations
• sap gateway 7.5
• sap gateway 7.51
• sap gateway 7.52
• sap gateway 7.53
• sap ui5 1.0.0
Related
References
- http://packetstormsecurity.com/files/153661/SAPUI5-1.0.0-SAP-Gateway-7.5-7.51-7.52-7.53-Content-Spoofing.html Exploit, Third Party Advisory
- http://www.securityfocus.com/bid/109074 Third Party Advisory, VDB Entry
- https://cxsecurity.com/ascii/WLB-2019050283 Third Party Advisory
- https://drive.google.com/open?id=1aGFqggvydehSK7MFIsfKW7tO60yiF55f Exploit, Third Party Advisory
- https://launchpad.support.sap.com/#/notes/2752614 Permissions Required, Vendor Advisory
- https://launchpad.support.sap.com/#/notes/2911267 launchpad.support.sap.com
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575 Vendor Advisory
- http://packetstormsecurity.com/files/153661/SAPUI5-1.0.0-SAP-Gateway-7.5-7.51-7.52-7.53-Content-Spoofing.html Exploit, Third Party Advisory
- http://www.securityfocus.com/bid/109074 Third Party Advisory, VDB Entry
- https://cxsecurity.com/ascii/WLB-2019050283 Third Party Advisory
- https://drive.google.com/open?id=1aGFqggvydehSK7MFIsfKW7tO60yiF55f Exploit, Third Party Advisory
- https://launchpad.support.sap.com/#/notes/2752614 Permissions Required, Vendor Advisory
- https://launchpad.support.sap.com/#/notes/2911267 launchpad.support.sap.com
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575 Vendor Advisory