CVE-2019-0365

CVE-2019-0365: vulnerability in SAP GUI for Windows (BC-FES-GUI)

Published · Updated

Follow this CVE+ Monitor SAP GUI+ Monitor SAP GUI for Java

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.4%
SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.
Affected products
SAP SE · SAP GUI for Java (BC-FES-JAV)SAP SE · SAP GUI for Windows (BC-FES-GUI)SAP SE · SAP Kernel (KERNEL)SAP SE · SAP Kernel (KRNL32NUC)SAP SE · SAP Kernel (KRNL32UC)SAP SE · SAP Kernel (KRNL64NUC)SAP SE · SAP Kernel (KRNL64UC)
Related CVEs — SAP GUI for Windows (BC-FES-GUI)

In the same product, most dangerous first.

CVE-2019-0349—CVE-2019-0349EPSS 1.2%