CVE-2019-0304
FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, allows an attacker to inject code or specifically manipulated command that can be executed by the application. An attacker could thereby control the behaviour of the application.
- Score
- CVSS 3.0 9.8 Critical
- Status
- Modified - cna@sap.com
- Published
- 2019-06-12
- Last modified
- 2024-08-04
- Weaknesses
- CWE-74
Affected products
- Advanced Business Application Programming Platform Kernel (Sap)
- Advanced Business Application Programming Platform Krnl32nuc (Sap)
- Advanced Business Application Programming Platform Krnl32uc (Sap)
- Advanced Business Application Programming Platform Krnl64nuc (Sap)
- Advanced Business Application Programming Platform Krnl64uc (Sap)
- Sap Netweaver As Abap Platformkernel (Sap Se)
- Sap Netweaver As Abap Platformkrnl32nuc (Sap Se)
- Sap Netweaver As Abap Platformkrnl32uc (Sap Se)
- Sap Netweaver As Abap Platformkrnl64nuc (Sap Se)
- Sap Netweaver As Abap Platformkrnl64uc (Sap Se)
References
- https://launchpad.support.sap.com/#/notes/2719530
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242
