← Back

CVE-2019-0304

nvd nist
Published: Jun 12, 2019Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, allows an attacker to inject code or specifically manipulated command that can be executed by the application. An attacker could thereby control the behaviour of the application.

Affected (24)

Configuration A
24 vulnerable
Vulnerable SoftwareAffected Versions
Sap
Version 7.21
Version 7.45
Version 7.49
Version 7.53
Version 7.73
Sap
Version 7.21
Version 7.21ext
Version 7.22
Version 7.22ext
Sap
Version 7.21
Version 7.21ext
Version 7.22
Version 7.22ext
Sap
Version 7.21
Version 7.21ext
Version 7.22
Version 7.22ext
Version 7.49
Sap
Version 7.21
Version 7.21ext
Version 7.22
Version 7.22ext
Version 7.49
Version 7.73

References (4)

Source: cna@sap.com
Permissions RequiredVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions RequiredVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.