CVEvulnerability

CVE-2019-0399

6.5 MEDIUM Published 2019-12-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-12-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N

Description

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure.

Affected configurations

• sap portfolio and project management cprxrpm 500 702 • sap portfolio and project management cprxrpm 600 740 • sap portfolio and project management cprxrpm 610 740 • sap portfolio and project management eppm 100 • sap portfolio and project management s4core 102 • sap portfolio and project management s4core 103

References