CVE-2019-0399

CVE-2019-0399: vulnerability in SAP Portfolio and Project Management (CPRXRPM)

Published · Updated

Follow this CVE+ Monitor SAP Portfolio and Project Management

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure.
Affected products
SAP SE · SAP Portfolio and Project Management (CPRXRPM)SAP SE · SAP Portfolio and Project Management (EPPM)SAP SE · SAP Portfolio and Project Management (S4CORE)