Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2013-3319

Published: 16/08/2013 Updated: 29/08/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Subscribe to Sap

Vulnerability Summary

The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote malicious users to obtain sensitive information via a crafted SOAP request to TCP port 1128.

Vulnerable Product Search on Vulmon Subscribe to Product

sap netweaver 7.03

Github Repositories

https://github.com/integrity-sa/cve-2013-3319

metasploit module for CVE-2013-3319 / SAP Security Note 1816536

cve-2013-3319 metasploit module for CVE-2013-3319 / SAP Security Note 1816536 obsolete: use sap_hostctrl_getcomputersystem from metasploit This is kept for historical purposes only Full advisory: labsintegritypt/advisories/cve-2013-3319/

References

CWE-200http://scn.sap.com/docs/DOC-8218http://labs.integrity.pt/advisories/cve-2013-3319/https://service.sap.com/sap/support/notes/1816536http://secunia.com/advisories/54277https://exchange.xforce.ibmcloud.com/vulnerabilities/85905https://nvd.nist.govhttps://github.com/integrity-sa/cve-2013-3319
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
man-in-the-middleCVE-2024-34558CVE-2024-32674CVE-2024-34351XPath injectionCVE-2023-45866CVE-2024-25528CVE-2024-25517path traversal
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook