5
CVSSv2

CVE-2019-0312

Published: 12/06/2019 Updated: 24/08/2020
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Several web pages provided SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 and SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50) are not password protected. An attacker could access landscape information like host names, ports or other technical data in the absence of restrictive firewall and port settings.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

sap netweaver process integration 7.50

sap netweaver process integration 7.20

sap netweaver process integration 7.10

sap netweaver process integration 7.11

sap netweaver process integration 7.30

sap netweaver process integration 7.31

sap netweaver process integration 7.40