CVE-2019-0243

CVE-2019-0243: vulnerability in SAP BW/4HANA (DW4CORE)

Published · Updated

Follow this CVE+ Monitor SAP BW/4HANA

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.7%
Under some circumstances, masterdata maintenance in SAP BW/4HANA (fixed in DW4CORE version 1.0 (SP08)) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Affected products
SAP SE · SAP BW/4HANA (DW4CORE)