CVE-2019-0327: Malicious File Upload
SAP NetWeaver for Java Application Server - Web Container, (engineapi, versions 7.1, 7.2, 7.3, 7.31, 7.4 and 7.5), (servercode, versions 7.2, 7.3, 7.31, 7.4, 7.5), allows an attacker to upload files (including script files) without proper file format validation.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-0327?
CVE-2019-0327 is a vulnerability in SAP NetWeaver for Java Application Server - Web Container that allows an attacker to upload files without proper file format validation.
Which software versions are affected by CVE-2019-0327?
CVE-2019-0327 affects SAP NetWeaver Application Server Java versions 7.10, 7.20, 7.30, 7.31, 7.40, and 7.50.
What is the severity of CVE-2019-0327?
CVE-2019-0327 has a severity score of 7.2 (high).
How can an attacker exploit CVE-2019-0327?
An attacker can exploit CVE-2019-0327 by uploading files, including script files, without proper file format validation.
How can I mitigate CVE-2019-0327?
To mitigate CVE-2019-0327, SAP recommends applying the necessary security patches provided by SAP.