5.3
CVE-2019-0318
- EPSS 1.36%
- Veröffentlicht 10.07.2019 19:15:10
- Zuletzt bearbeitet 21.11.2024 04:16:40
- Quelle cna@sap.com
- CVE-Watchlists
- Unerledigt
LoginUnder certain conditions SAP NetWeaver Application Server for Java (Startup Framework), versions 7.21, 7.22, 7.45, 7.49, and 7.53, allows an attacker to access information which would otherwise be restricted.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SAP ≫ Netweaver Application Server Java Version7.21
SAP ≫ Netweaver Application Server Java Version7.22
SAP ≫ Netweaver Application Server Java Version7.45
SAP ≫ Netweaver Application Server Java Version7.49
SAP ≫ Netweaver Application Server Java Version7.53
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.36% | 0.681 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.3 | 1.6 | 3.6 |
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 3.5 | 6.8 | 2.9 |
AV:N/AC:M/Au:S/C:P/I:N/A:N
|
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575
http://www.securityfocus.com/bid/109069
https://launchpad.support.sap.com/#/notes/2738791