CVE-2019-0319
HIGH 7.5EPSS 2.5%
The SAP Gateway, versions 7.5, 7.51, 7.52 and 7.53, allows an attacker to inject content which is displayed in the form of an error message. An attacker could thus mislead a user to believe this information is from the legitimate service when it's not.
- Affected
- SAP SE · SAP Gateway
- CVSS v3.0 NVD
- 7.5 HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N - EPSS
- 2.51% chance of exploitation in the next 30 days, 85th percentile
- Published
- 2019-07-10
- Updated
- 2024-08-04
Proof-of-concept exploits (1)
Security advisories
- https://launchpad.support.sap.com/#/notes/2752614
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575
- http://www.securityfocus.com/bid/109074
- https://cxsecurity.com/ascii/WLB-2019050283
- https://drive.google.com/open?id=1aGFqggvydehSK7MFIsfKW7tO60yiF55f