CVE-2019-0318

EUVD-2019-1091
Under certain conditions SAP NetWeaver Application Server for Java (Startup Framework), versions 7.21, 7.22, 7.45, 7.49, and 7.53, allows an attacker to access information which would otherwise be restricted.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
HIGH
LOW
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
Affected Products (NVD)
VendorProductVersion
sapnetweaver_application_server_java
7.21
sapnetweaver_application_server_java
7.22
sapnetweaver_application_server_java
7.45
sapnetweaver_application_server_java
7.49
sapnetweaver_application_server_java
7.53
𝑥
= Vulnerable software versions
References
http://www.securityfocus.com/bid/109069
https://launchpad.support.sap.com/#/notes/2738791
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575
http://www.securityfocus.com/bid/109069
https://launchpad.support.sap.com/#/notes/2738791
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575