← back
CVE-2019-0399

CVE-2019-0399

EPSS 0.9%
SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure.
Affected products
SAP SE · SAP Portfolio and Project Management (CPRXRPM)SAP SE · SAP Portfolio and Project Management (EPPM)SAP SE · SAP Portfolio and Project Management (S4CORE)

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://launchpad.support.sap.com/#/notes/2803554https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397