CVE-2019-0319

7.5HIGH

Key Information:

Vendor
SAP
Status
SAP Gateway
Vendor
CVE Published:
10 July 2019

Summary

The SAP Gateway, versions 7.5, 7.51, 7.52 and 7.53, allows an attacker to inject content which is displayed in the form of an error message. An attacker could thus mislead a user to believe this information is from the legitimate service when it's not.

Affected Version(s)

SAP Gateway < 7.5 < 7.5

SAP Gateway < 7.51 < 7.51

SAP Gateway < 7.52 < 7.52

References

http://www.securityfocus.com/bid/109074
vdb-entryx_refsource_BID
https://launchpad.support.sap.com/#/notes/2752614
x_refsource_MISC
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_CONFIRM

EPSS Score

6% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.