CVE-2019-0328

published 2019-07-10

CVE-2019-0328: ABAP Tests Modules (SAP Basis, versions 7.0, 7.1, 7.3, 7.31, 7.4, 7.5) of SAP NetWeaver Process Integration enables an attacker the execution of OS commands…

Priority P3 46 high 7.2 CVSS 3.0

AV N AC L PR H UI N S U C H I H A H

ABAP Tests Modules (SAP Basis, versions 7.0, 7.1, 7.3, 7.31, 7.4, 7.5) of SAP NetWeaver Process Integration enables an attacker the execution of OS commands with privileged rights. An attacker could thereby impact the integrity and availability of the system.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
sap	netweaver_process_integration	—	—
sap	netweaver_process_integration	—	—
sap	netweaver_process_integration	—	—
sap	netweaver_process_integration	—	—
sap	netweaver_process_integration	—	—
sap	netweaver_process_integration	—	—
sap_se	sap_netweaver_process_integration_abap_tests	< 7.0	7.0
sap_se	sap_netweaver_process_integration_abap_tests	< 7.1	7.1
sap_se	sap_netweaver_process_integration_abap_tests	< 7.3	7.3
sap_se	sap_netweaver_process_integration_abap_tests	< 7.31	7.31
sap_se	sap_netweaver_process_integration_abap_tests	< 7.4	7.4
sap_se	sap_netweaver_process_integration_abap_tests	< 7.5	7.5

CVSS provenance

nvd v3.0 7.2 HIGH CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 9.0 CRITICAL AV:N/AC:L/Au:S/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-78