Vulnerability Details CVE-2019-0328
ABAP Tests Modules (SAP Basis, versions 7.0, 7.1, 7.3, 7.31, 7.4, 7.5) of SAP NetWeaver Process Integration enables an attacker the execution of OS commands with privileged rights. An attacker could thereby impact the integrity and availability of the system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 76.9%
CVSS Severity
CVSS v3 Score 7.2
CVSS v2 Score 9.0
References
- http://www.securityfocus.com/bid/109067
- https://launchpad.support.sap.com/#/notes/2774489
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575
- http://www.securityfocus.com/bid/109067
- https://launchpad.support.sap.com/#/notes/2774489
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575
Products affected by CVE-2019-0328
-
cpe:2.3:a:sap:netweaver_process_integration:7.0
-
cpe:2.3:a:sap:netweaver_process_integration:7.1
-
cpe:2.3:a:sap:netweaver_process_integration:7.3
-
cpe:2.3:a:sap:netweaver_process_integration:7.31
-
cpe:2.3:a:sap:netweaver_process_integration:7.4
-
cpe:2.3:a:sap:netweaver_process_integration:7.5