CVE-2019-0355
SAP NetWeaver Application Server Java Web Container, ENGINEAPI (before versions 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) and SAP-JEECOR (before versions 6.40, 7.0, 7.01), allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application.
- Score
- CVSS 3.1 7.2 High
- Status
- Modified - cna@sap.com
- Published
- 2019-09-10
- Last modified
- 2024-08-04
- Weaknesses
- CWE-94
Affected products
- Netweaver Application Server Java (Sap)
- Sap Netweaver As For Java Web Container-engineapi (Sap Se)
- Sap Netweaver As For Java Web Container-sap-jeecor (Sap Se)
References
- https://launchpad.support.sap.com/#/notes/2798336
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506
