CVE-2019-0282
EUVD-2019-105510.04.2019, 21:29
Several web pages in SAP NetWeaver Process Integration (Runtime Workbench), fixed in versions 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; can be accessed without user authentication, which might expose internal data like release information, Java package and Java object names which can be misused by the attacker.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| sap | netweaver_process_integration | 7.10 |
| sap | netweaver_process_integration | 7.11 |
| sap | netweaver_process_integration | 7.30 |
| sap | netweaver_process_integration | 7.31 |
| sap | netweaver_process_integration | 7.40 |
| sap | netweaver_process_integration | 7.50 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration