CVE-2019-0340

The XML parser, which is being used by SAP Enable Now, before version 1902, has not been hardened correctly, leading to Missing XML Validation vulnerability. This issue affects the file upload at multiple locations. An attacker can read local XXE files.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cna@sap.com

Published

2019-08-14

Last modified

2024-08-04

Weaknesses

CWE-112, CWE-611

Affected products

• Enable Now (Sap)
• Sap Enable Now (Sap Se)

References

• https://launchpad.support.sap.com/#/notes/2794742
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017