{"id":"CVE-2019-0293","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-0293","generatedAt":"2026-10-28T21:19:40.200Z","title":"Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system (ST-PI, before versions 2008_1_700,…","description":"Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system (ST-PI, before versions 2008_1_700, 2008_1_710, and 740).","published":"2019-05-14T21:29:01.000Z","lastModified":"2026-06-17T02:08:09.000Z","status":"Modified","sourceIdentifier":"cna@sap.com","cvss":{"version":"3.0","score":6.5,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-862"],"affected":["sap/sap solution manager system"],"epss":{"score":0.01432,"percentile":0.72909,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.43%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/108324","tags":["Third Party Advisory","VDB Entry"],"source":"cna@sap.com"},{"url":"https://launchpad.support.sap.com/#/notes/2756625","tags":["Permissions Required","Vendor Advisory"],"source":"cna@sap.com"},{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032","tags":["Vendor Advisory"],"source":"cna@sap.com"},{"url":"http://www.securityfocus.com/bid/108324","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.support.sap.com/#/notes/2756625","tags":["Permissions Required","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-0293","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}