CVE-2019-0363

Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to overload the server or retrieve information about internal network ports.

Score

CVSS 3.1 7.1 High

Status

Modified - cna@sap.com

Published

2019-09-10

Last modified

2024-08-04

Affected products

• Hana Extended Application Services (Sap)
• Sap Hana Extended Application Services (Sap Se)

References

• https://launchpad.support.sap.com/#/notes/2817491
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506