CVE-2019-0304Injection in SE SAP Netweaver AS Abap Platform

Severity
9.8CRITICALNVD
EPSS
0.5%
top 33.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJun 12
Latest updateMay 24

Description

FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, allows an attacker to inject code or specifically manipulated command that can be executed by the application. An attacker could thereby control the behaviour of the application.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

🔴Vulnerability Details

2
GHSA
GHSA-cr28-fpxh-wjpp: FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 72022-05-24
CVEList
CVE-2019-0304: FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 72019-06-12

📋Vendor Advisories

1
Red Hat
docker: Security regression of CVE-2019-5736 due to inclusion of vulnerable runc2020-06-23

💬Community

1
Bugzilla
CVE-2020-14298 docker: Security regression of CVE-2019-5736 due to inclusion of vulnerable runc2020-06-18
CVE-2019-0304 — Injection | cvebase