CVEvulnerability
CVE-2019-0328
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-07-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.2 HIGH — CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-78
Description
ABAP Tests Modules (SAP Basis, versions 7.0, 7.1, 7.3, 7.31, 7.4, 7.5) of SAP NetWeaver Process Integration enables an attacker the execution of OS commands with privileged rights. An attacker could thereby impact the integrity and availability of the system.
Affected configurations
• sap netweaver process integration 7.0
• sap netweaver process integration 7.1
• sap netweaver process integration 7.3
• sap netweaver process integration 7.4
• sap netweaver process integration 7.5
• sap netweaver process integration 7.31
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- http://www.securityfocus.com/bid/109067 Third Party Advisory, VDB Entry
- https://launchpad.support.sap.com/#/notes/2774489 Permissions Required, Vendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575 Vendor Advisory
- http://www.securityfocus.com/bid/109067 Third Party Advisory, VDB Entry
- https://launchpad.support.sap.com/#/notes/2774489 Permissions Required, Vendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575 Vendor Advisory