CVE-2019-0337: XSS
Java Proxy Runtime of SAP NetWeaver Process Integration, versions 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs and allows an attacker to execute malicious scripts in the url thereby resulting in Reflected Cross-Site Scripting (XSS) vulnerability
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-0337?
CVE-2019-0337 is a vulnerability in the Java Proxy Runtime of SAP NetWeaver Process Integration, versions 7.10, 7.11, 7.30, 7.31, 7.40, and 7.50 that allows for Reflected Cross-Site Scripting (XSS) attacks.
What is the severity of CVE-2019-0337?
The severity of CVE-2019-0337 is medium (6.1).
Which software versions are affected by CVE-2019-0337?
SAP NetWeaver Process Integration versions 7.10, 7.11, 7.30, 7.31, 7.40, and 7.50 are affected by CVE-2019-0337.
How does CVE-2019-0337 work?
CVE-2019-0337 occurs because the Java Proxy Runtime of SAP NetWeaver Process Integration fails to properly encode user-controlled inputs, allowing attackers to execute malicious scripts in the URL.
How can I fix CVE-2019-0337?
To fix CVE-2019-0337, it is recommended to apply the necessary patches provided by SAP or upgrade to a newer version of SAP NetWeaver Process Integration.