CVE-2019-0278: Medium severity sap netweaver process integration vulnerability
Under certain conditions the Monitoring Servlet of the SAP NetWeaver Process Integration (Messaging System), fixed in versions 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to see the names of database tables used by the application, leading to information disclosure.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-0278?
CVE-2019-0278 is a vulnerability in the Monitoring Servlet of the SAP NetWeaver Process Integration, which can lead to information disclosure.
What is the severity of CVE-2019-0278?
The severity of CVE-2019-0278 is medium, with a CVSS score of 4.3.
Which versions of SAP NetWeaver Process Integration are affected by CVE-2019-0278?
Versions 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 of SAP NetWeaver Process Integration are affected by CVE-2019-0278.
How can an attacker exploit CVE-2019-0278?
An attacker can exploit CVE-2019-0278 to see the names of database tables used by the application, leading to information disclosure.
Where can I find more information about CVE-2019-0278?
You can find more information about CVE-2019-0278 on the SAP Support Portal and the SAP Community Wiki.