CVE-2019-0278
First published: Wed Apr 10 2019(Updated: )
Under certain conditions the Monitoring Servlet of the SAP NetWeaver Process Integration (Messaging System), fixed in versions 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to see the names of database tables used by the application, leading to information disclosure.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP NetWeaver Process Integration | =7.10 | |
| SAP NetWeaver Process Integration | =7.11 | |
| SAP NetWeaver Process Integration | =7.20 | |
| SAP NetWeaver Process Integration | =7.30 | |
| SAP NetWeaver Process Integration | =7.31 | |
| SAP NetWeaver Process Integration | =7.40 | |
| SAP NetWeaver Process Integration | =7.50 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-0278?
CVE-2019-0278 is a vulnerability in the Monitoring Servlet of the SAP NetWeaver Process Integration, which can lead to information disclosure.
What is the severity of CVE-2019-0278?
The severity of CVE-2019-0278 is medium, with a CVSS score of 4.3.
Which versions of SAP NetWeaver Process Integration are affected by CVE-2019-0278?
Versions 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 of SAP NetWeaver Process Integration are affected by CVE-2019-0278.
How can an attacker exploit CVE-2019-0278?
An attacker can exploit CVE-2019-0278 to see the names of database tables used by the application, leading to information disclosure.
Where can I find more information about CVE-2019-0278?
You can find more information about CVE-2019-0278 on the SAP Support Portal and the SAP Community Wiki.
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/sap
- canonical/sap netweaver process integration
- version/sap netweaver process integration/7.10
- version/sap netweaver process integration/7.11
- version/sap netweaver process integration/7.20
- version/sap netweaver process integration/7.30
- version/sap netweaver process integration/7.31
- version/sap netweaver process integration/7.40
- version/sap netweaver process integration/7.50