CVE-2019-0318 Under certain conditions SAP NetWeaver Application Server for Java (Startup Framework), versions 7.21, 7.22, 7.45, 7.49, and 7.53, allows an attacker to access information which would otherwise be res...
MediumCVSS 5.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Under certain conditions SAP NetWeaver Application Server for Java (Startup Framework), versions 7.21, 7.22, 7.45, 7.49, and 7.53, allows an attacker to access information which would otherwise be restricted.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap netweaver application server java | = 7.21 | No fix listed |
| sap netweaver application server java | = 7.22 | No fix listed |
| sap netweaver application server java | = 7.45 | No fix listed |
| sap netweaver application server java | = 7.49 | No fix listed |
| sap netweaver application server java | = 7.53 | No fix listed |
| SAP_SE SAP NetWeaver Application Server for Java (Startup Framework) | = < 7.21 | No fix listed |
| SAP_SE SAP NetWeaver Application Server for Java (Startup Framework) | = < 7.22 | No fix listed |
| SAP_SE SAP NetWeaver Application Server for Java (Startup Framework) | = < 7.45 | No fix listed |
| SAP_SE SAP NetWeaver Application Server for Java (Startup Framework) | = < 7.49 | No fix listed |
| SAP_SE SAP NetWeaver Application Server for Java (Startup Framework) | = < 7.53 | No fix listed |
References
- 109069 third-party-advisory vdb-entry
- launchpad.support.sap.com permissions-required vendor-advisory
- wiki.scn.sap.com vendor-advisory