CVE-2019-0351

8.8HIGH

Key Information:

Vendor
SAP
Vendor
CVE Published:
14 August 2019

Summary

A remote code execution vulnerability exists in the SAP NetWeaver UDDI Server (Services Registry), versions 7.10, 7.20, 7.30, 7.31, 7.40, 7.50. Because of this, an attacker can exploit Services Registry potentially enabling them to take complete control of the product, including viewing, changing, or deleting data by injecting code into the working memory which is subsequently executed by the application. It can also be used to cause a general fault in the product, causing the product to terminate.

Affected Version(s)

SAP NetWeaver UDDI Server (Services Registry) < 7.10 < 7.10

SAP NetWeaver UDDI Server (Services Registry) < 7.20 < 7.20

SAP NetWeaver UDDI Server (Services Registry) < 7.30 < 7.30

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.