CRITICAL🇬🇧 English

CVE-2019-0403

CVSS 9.8v3.1pub. 2019-12-11upd. 2024-11-21

SAP Enable Now, before version 1911, allows an attacker to input commands into the CSV files, which will be executed when opened, leading to CSV Command Injection.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Sap Enable Now

    APP
    Sap
    < 1911
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2019-0404HIGH7.5ten sam produkt

SAP Enable Now, before version 1911, leaks information about network configuration in the server error message...

CVE-2019-0405HIGH7.5ten sam produkt

SAP Enable Now, before version 1911, leaks information about the existence of a particular user which can be u...

CVE-2019-0341HIGH8.8ten sam produkt

The session cookie used by SAP Enable Now, version 1902, does not have the HttpOnly flag set. If an attacker r...

CVE-2023-33988MEDIUM6.1ten sam produkt

In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1...

CVE-2023-36918MEDIUM6.1ten sam produkt

In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1...