VulnerabilityModified
CVE-2019-0318
Under certain conditions SAP NetWeaver Application Server for Java (Startup Framework), versions 7.21, 7.22, 7.45, 7.49, and 7.53, allows an attacker to access information which would otherwise be restricted.
MEDIUM 5.3EPSS 1.36%
Does this matter?
Lower severity and a low EPSS score (1.36%). Track it; it rarely justifies an emergency change on its own.
Description
Under certain conditions SAP NetWeaver Application Server for Java (Startup Framework), versions 7.21, 7.22, 7.45, 7.49, and 7.53, allows an attacker to access information which would otherwise be restricted.
- CVSS 3.0
- 5.3 MEDIUMCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 1.36% probability · 70th percentile
- CISA KEV
- Not listed
- Affected
- sap/netweaver application server java
- Source
- cna@sap.com
References
- http://www.securityfocus.com/bid/109069Third Party Advisory, VDB Entry
- https://launchpad.support.sap.com/#/notes/2738791Permissions Required, Vendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575Vendor Advisory
- http://www.securityfocus.com/bid/109069Third Party Advisory, VDB Entry
- https://launchpad.support.sap.com/#/notes/2738791Permissions Required, Vendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.