cbcvebase.
CVE-2019-0365
published 2019-09-10

CVE-2019-0365: SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49…

PriorityP340high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
1.41%
69.4th percentile
SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.

Affected

34 ranges· showing 25
VendorProductVersion rangeFixed in
sapsap_kernel——
sapsap_kernel——
sapsap_kernel——
sapsap_kernel——
sapsap_kernel——
sapsap_kernel_krnl32nuc——
sapsap_kernel_krnl32nuc——
sapsap_kernel_krnl32nuc——
sapsap_kernel_krnl32nuc——
sapsap_kernel_krnl32uc——
sapsap_kernel_krnl32uc——
sapsap_kernel_krnl32uc——
sapsap_kernel_krnl32uc——
sapsap_kernel_krnl64nuc——
sapsap_kernel_krnl64nuc——
sapsap_kernel_krnl64nuc——
sapsap_kernel_krnl64nuc——
sapsap_kernel_krnl64uc——
sapsap_kernel_krnl64uc——
sapsap_kernel_krnl64uc——
sapsap_kernel_krnl64uc——
sapsap_kernel_krnl64uc——
sapsap_kernel_krnl64uc——
sap_sesap_gui_for_java< 7.57.5
sap_sesap_gui_for_windows< 7.57.5

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.