CVE-2019-0355: falha em SAP NetWeaver AS for Java (Web…
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar SAP NetWeaver AS for Java-ENGINEAPI+ Monitorar SAP NetWeaver AS for Java-SAP-JEECOR
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 1.6%
SAP NetWeaver Application Server Java Web Container, ENGINEAPI (before versions 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) and SAP-JEECOR (before versions 6.40, 7.0, 7.01), allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application.