CVE-2019-0388

CWE-2903 documents3 sources
Severity
5.3MEDIUM
EPSS
0.2%
top 51.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
SAP SE SAP UISAP SE SAP UI 700SAP UI
Timeline
PublishedNov 13
Latest updateMay 24

Description

SAP UI5 HTTP Handler (corrected in SAP_UI versions 7.5, 7.51, 7.52, 7.53, 7.54 and SAP UI_700 version 2.0) allows an attacker to manipulate content due to insufficient URL validation.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages3 packages

▶CVEListV5sap_se/sap_ui< 7.5+4
▶CVEListV5sap_se/sap_ui_700< 2.0
▶NVDsap/ui6 versions+5

🔴Vulnerability Details

2
GHSA
GHSA-x4ph-cq89-6r82: SAP UI5 HTTP Handler (corrected in SAP_UI versions 7↗2022-05-24
▶
CVEList
CVE-2019-0388: SAP UI5 HTTP Handler (corrected in SAP_UI versions 7↗2019-11-13
▶
CVE-2019-0388 (MEDIUM CVSS 5.3) | SAP UI5 HTTP Handler (corrected in | cvebase.io