Vulnerability Details CVE-2019-0259
SAP BusinessObjects, versions 4.2 and 4.3, (Visual Difference) allows an attacker to upload any file (including script files) without proper file format validation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.6%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- http://www.securityfocus.com/bid/106997
- https://launchpad.support.sap.com/#/notes/2727564
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943
- http://www.securityfocus.com/bid/106997
- https://launchpad.support.sap.com/#/notes/2727564
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943
Products affected by CVE-2019-0259
-
cpe:2.3:a:sap:businessobjects:4.2
-
cpe:2.3:a:sap:businessobjects:4.3