CVE-2019-0363

published 2019-09-10

CVE-2019-0363: Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to overload the server or…

high 7.1 CVSS 3.1

AV N AC L PR L UI N S U C L I N A H

Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to overload the server or retrieve information about internal network ports.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sap	hana_extended_application_services	< 1.0.118	1.0.118
sap_se	sap_hana_extended_application_services	< 1.0.118	1.0.118