CVE-2019-0318

Under certain conditions SAP NetWeaver Application Server for Java (Startup Framework), versions 7.21, 7.22, 7.45, 7.49, and 7.53, allows an attacker to access information which would otherwise be restricted.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.3 MEDIUM
NETWORK
HIGH
LOW
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
sapCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 56%
VendorProductVersion
sapnetweaver_application_server_java
7.21
sapnetweaver_application_server_java
7.22
sapnetweaver_application_server_java
7.45
sapnetweaver_application_server_java
7.49
sapnetweaver_application_server_java
7.53
𝑥
= Vulnerable software versions
References
http://www.securityfocus.com/bid/109069
https://launchpad.support.sap.com/#/notes/2738791
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575
http://www.securityfocus.com/bid/109069
https://launchpad.support.sap.com/#/notes/2738791
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575