CVE-2019-0247

SAP Cloud Connector, before version 2.11.3, allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cna@sap.com

Published

2019-01-08

Last modified

2024-08-04

Weaknesses

CWE-94

Affected products

• Cloud Connector (Sap)
• Sap Cloud Connector (Sap Se)

References

• https://launchpad.support.sap.com/#/notes/2696233
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985