CVE-2019-0304: Code Injection
Published Jun 12, 2019
·Updated
FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, allows an attacker to inject code or specifically manipulated command that can be executed by the application. An attacker could thereby control the behaviour of the application.
Affected Software
24 affected components
SAP Advanced Business Application Programming Platform Kernel=7.21
SAP Advanced Business Application Programming Platform Kernel=7.45
SAP Advanced Business Application Programming Platform Kernel=7.49
SAP Advanced Business Application Programming Platform Kernel=7.53
SAP Advanced Business Application Programming Platform Kernel=7.73
SAP Advanced Business Application Programming Platform Krnl32nuc=7.21
SAP Advanced Business Application Programming Platform Krnl32nuc=7.21ext
SAP Advanced Business Application Programming Platform Krnl32nuc=7.22
SAP Advanced Business Application Programming Platform Krnl32nuc=7.22ext
SAP Advanced Business Application Programming Platform Krnl32uc=7.21
SAP Advanced Business Application Programming Platform Krnl32uc=7.21ext
SAP Advanced Business Application Programming Platform Krnl32uc=7.22
SAP Advanced Business Application Programming Platform Krnl32uc=7.22ext
SAP Advanced Business Application Programming Platform Krnl64nuc=7.21
SAP Advanced Business Application Programming Platform Krnl64nuc=7.21ext
SAP Advanced Business Application Programming Platform Krnl64nuc=7.22
SAP Advanced Business Application Programming Platform Krnl64nuc=7.22ext
SAP Advanced Business Application Programming Platform Krnl64nuc=7.49
SAP Advanced Business Application Programming Platform Krnl64uc=7.21
SAP Advanced Business Application Programming Platform Krnl64uc=7.21ext
SAP Advanced Business Application Programming Platform Krnl64uc=7.22
SAP Advanced Business Application Programming Platform Krnl64uc=7.22ext
SAP Advanced Business Application Programming Platform Krnl64uc=7.49
SAP Advanced Business Application Programming Platform Krnl64uc=7.73
Event History
Jun 12, 2019
CVE Published
via MITRE·02:21 PM
Data Sourced
via MITRE·02:21 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-0304?
The severity of CVE-2019-0304 is critical with a CVSS score of 9.8.
2
How can I fix the FTP Function vulnerability in SAP NetWeaver AS ABAP Platform versions affected by CVE-2019-0304?
To fix the FTP Function vulnerability, apply the necessary patches provided by SAP according to SAP Note 2719530.
3
What is the CWE associated with CVE-2019-0304?
CVE-2019-0304 is associated with CWE-74.