CVE-2019-0364

4 documents4 sources
Severity
4.3MEDIUM
EPSS
0.2%
top 58.33%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SAP SE SAP Hana Extended Application ServicesSAP Hana Extended Application Services
Timeline
PublishedSep 10
Latest updateMay 24

Description

Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to enumerate open ports.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-frjh-x4mx-5qxh: Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1↗2022-05-24
▶
CVEList
CVE-2019-0364: Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1↗2019-09-10
▶
CVE-2019-0364 (MEDIUM CVSS 4.3) | Attackers may misuse an HTTP/REST e | cvebase.io