CVE-2019-0340

CVE-2019-0340: vulnerability in SAP Enable Now

Published · Updated

Follow this CVE+ Monitor SAP Enable Now

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
The XML parser, which is being used by SAP Enable Now, before version 1902, has not been hardened correctly, leading to Missing XML Validation vulnerability. This issue affects the file upload at multiple locations. An attacker can read local XXE files.
Affected products
SAP SE · SAP Enable Now
Related CVEs — SAP Enable Now

In the same product, most dangerous first.

CVE-2019-0403—CVE-2019-0403EPSS 2.1%CVE-2019-0405—CVE-2019-0405EPSS 1.1%CVE-2019-0404—CVE-2019-0404EPSS 1.1%CVE-2019-0341—CVE-2019-0341EPSS 1.1%CVE-2020-6178MEDIUMCVE-2020-6178EPSS 0.7%CVE-2022-35297—CVE-2022-35297EPSS 0.6%