CVE-2019-0403

SAP Enable Now, before version 1911, allows an attacker to input commands into the CSV files, which will be executed when opened, leading to CSV Command Injection.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cna@sap.com

Published

2019-12-11

Last modified

2024-08-04

Weaknesses

CWE-1236

Affected products

• Enable Now (Sap)
• Sap Enable Now (Sap Se)

References

• https://launchpad.support.sap.com/#/notes/2845183
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397