{"id":"CVE-2019-0255","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-0255","generatedAt":"2026-10-28T20:25:51.856Z","title":"SAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75, fails to validate type of installation for an ABAP Server system correctly.","description":"SAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75, fails to validate type of installation for an ABAP Server system correctly. That behavior may lead to situation, where business user achieves access to the full SAP Menu, that is 'Easy Access Menu'. The situation can be misused by any user to leverage privileges to business functionality.","published":"2019-02-15T18:29:01.000Z","lastModified":"2026-06-17T02:08:05.000Z","status":"Modified","sourceIdentifier":"cna@sap.com","cvss":{"version":"3.0","score":8.1,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},"cwe":["CWE-20"],"affected":["sap/advanced business application programming platform kernel","sap/advanced business application programming platform krnl64nuc","sap/advanced business application programming platform krnl64uc"],"epss":{"score":0.01653,"percentile":0.76427,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.65%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/106987","tags":["Third Party Advisory","VDB Entry"],"source":"cna@sap.com"},{"url":"https://launchpad.support.sap.com/#/notes/2723570","tags":["Permissions Required","Vendor Advisory"],"source":"cna@sap.com"},{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943","tags":["Vendor Advisory"],"source":"cna@sap.com"},{"url":"http://www.securityfocus.com/bid/106987","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.support.sap.com/#/notes/2723570","tags":["Permissions Required","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-0255","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}