6.5
CVSSv2

CVE-2019-0330

Published: 10/07/2019 Updated: 19/12/2023
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 9.1 | Impact Score: 6 | Exploitability Score: 2.3
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

The OS Command Plugin in the transaction GPA_ADMIN and the OSCommand Console of SAP Diagnostic Agent (LM-Service), version 7.2, allow an malicious user to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

sap diagnostics agent 7.20