CVE-2019-0356

3 documents3 sources

Severity

4.3MEDIUM

EPSS

0.2%

top 58.33%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

SAP SE SAP Netweaver Process Integration Runtime Workbench – Messaging AND SAP Xiaf SAP Netweaver Process Integration

Timeline

PublishedSep 10

Latest updateMay 24

Description

Under certain conditions SAP NetWeaver Process Integration Runtime Workbench – MESSAGING and SAP_XIAF (before versions 7.31, 7.40, 7.50) allows an attacker to access information which would otherwise be restricted.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5sap_se/sap_netweaver_process_integration_runtime_workbench_–_messaging_and_sap_xiaf< 7.31+2

▶NVDsap/netweaver_process_integration7.31, 7.40, 7.50+2

🔴Vulnerability Details

GHSA

GHSA-h3r6-5qmm-j4fh: Under certain conditions SAP NetWeaver Process Integration Runtime Workbench ? MESSAGING and SAP_XIAF (before versions 7↗2022-05-24

▶

CVEList

CVE-2019-0356: Under certain conditions SAP NetWeaver Process Integration Runtime Workbench – MESSAGING and SAP_XIAF (before versions 7↗2019-09-10

▶