CVE-2019-0351
8.8HIGH
Key Information:
- Vendor
- SAP
- Vendor
- CVE Published:
- 14 August 2019
Summary
A remote code execution vulnerability exists in the SAP NetWeaver UDDI Server (Services Registry), versions 7.10, 7.20, 7.30, 7.31, 7.40, 7.50. Because of this, an attacker can exploit Services Registry potentially enabling them to take complete control of the product, including viewing, changing, or deleting data by injecting code into the working memory which is subsequently executed by the application. It can also be used to cause a general fault in the product, causing the product to terminate.
Affected Version(s)
SAP NetWeaver UDDI Server (Services Registry) < 7.10 < 7.10
SAP NetWeaver UDDI Server (Services Registry) < 7.20 < 7.20
SAP NetWeaver UDDI Server (Services Registry) < 7.30 < 7.30
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved