CVE-2019-0391

published 2019-11-13

CVE-2019-0391: Under certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) allows an attacker to access information which would otherwise…

medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C L I N A N

Under certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) allows an attacker to access information which would otherwise be restricted.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
sap	netweaver_application_server_java	—	—
sap	netweaver_application_server_java	—	—
sap	netweaver_application_server_java	—	—
sap	netweaver_application_server_java	—	—
sap	netweaver_application_server_java	—	—
sap	netweaver_application_server_java	—	—
sap_se	sap_netweaver_as_java	< 7.10	7.10
sap_se	sap_netweaver_as_java	< 7.20	7.20
sap_se	sap_netweaver_as_java	< 7.30	7.30
sap_se	sap_netweaver_as_java	< 7.31	7.31
sap_se	sap_netweaver_as_java	< 7.40	7.40
sap_se	sap_netweaver_as_java	< 7.50	7.50