CVE-2019-0328

CWE-78 — OS Command Injection4 documents4 sources
Severity
7.2HIGH
EPSS
0.9%
top 24.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SAP SE SAP Netweaver Process Integration Abap Tests (sap Basis)SAP Netweaver Process Integration
Timeline
PublishedJul 10
Latest updateMay 24

Description

ABAP Tests Modules (SAP Basis, versions 7.0, 7.1, 7.3, 7.31, 7.4, 7.5) of SAP NetWeaver Process Integration enables an attacker the execution of OS commands with privileged rights. An attacker could thereby impact the integrity and availability of the system.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-mf36-xjqx-xw36: ABAP Tests Modules (SAP Basis, versions 7↗2022-05-24
▶
CVEList
CVE-2019-0328: ABAP Tests Modules (SAP Basis, versions 7↗2019-07-10
▶
CVE-2019-0328 (HIGH CVSS 7.2) | ABAP Tests Modules (SAP Basis | cvebase.io