CVE-2019-0389: High severity sap netweaver as for java vulnerability
An administrator of SAP NetWeaver Application Server Java (J2EE-Framework), (corrected in versions 7.1, 7.2, 7.3, 7.31, 7.4, 7.5), may change privileges for all or some functions in Java Server, and enable users to execute functions, they are not allowed to execute otherwise.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this SAP NetWeaver Application Server Java vulnerability?
The vulnerability ID for this SAP NetWeaver Application Server Java vulnerability is CVE-2019-0389.
What is the severity of CVE-2019-0389?
CVE-2019-0389 has a severity score of 8.8, which is considered high.
Which versions of SAP NetWeaver Application Server Java are affected by CVE-2019-0389?
Versions 7.1, 7.2, 7.3, 7.31, 7.4, and 7.5 of SAP NetWeaver Application Server Java are affected by CVE-2019-0389.
How can an administrator of SAP NetWeaver Application Server Java mitigate the vulnerability?
Administrators can mitigate the vulnerability by updating to the corrected versions 7.1, 7.2, 7.3, 7.31, 7.4, or 7.5 of SAP NetWeaver Application Server Java.
Where can I find more information about CVE-2019-0389?
More information about CVE-2019-0389 can be found at the following references: [SAP Note 2814357](https://launchpad.support.sap.com/#/notes/2814357) and [SAP Wiki](https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390).