CVE-2019-0389
First published: Wed Nov 13 2019(Updated: )
An administrator of SAP NetWeaver Application Server Java (J2EE-Framework), (corrected in versions 7.1, 7.2, 7.3, 7.31, 7.4, 7.5), may change privileges for all or some functions in Java Server, and enable users to execute functions, they are not allowed to execute otherwise.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP NetWeaver Application Server Java | =7.1 | |
| SAP NetWeaver Application Server Java | =7.2 | |
| SAP NetWeaver Application Server Java | =7.3 | |
| SAP NetWeaver Application Server Java | =7.4 | |
| SAP NetWeaver Application Server Java | =7.5 | |
| SAP NetWeaver Application Server Java | =7.31 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this SAP NetWeaver Application Server Java vulnerability?
The vulnerability ID for this SAP NetWeaver Application Server Java vulnerability is CVE-2019-0389.
What is the severity of CVE-2019-0389?
CVE-2019-0389 has a severity score of 8.8, which is considered high.
Which versions of SAP NetWeaver Application Server Java are affected by CVE-2019-0389?
Versions 7.1, 7.2, 7.3, 7.31, 7.4, and 7.5 of SAP NetWeaver Application Server Java are affected by CVE-2019-0389.
How can an administrator of SAP NetWeaver Application Server Java mitigate the vulnerability?
Administrators can mitigate the vulnerability by updating to the corrected versions 7.1, 7.2, 7.3, 7.31, 7.4, or 7.5 of SAP NetWeaver Application Server Java.
Where can I find more information about CVE-2019-0389?
More information about CVE-2019-0389 can be found at the following references: [SAP Note 2814357](https://launchpad.support.sap.com/#/notes/2814357) and [SAP Wiki](https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390).
- collector/nvd-index
- agent/author
- agent/references
- agent/severity
- agent/type
- agent/tags
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/sap
- canonical/sap netweaver application server java
- version/sap netweaver application server java/7.1
- version/sap netweaver application server java/7.2
- version/sap netweaver application server java/7.3
- version/sap netweaver application server java/7.4
- version/sap netweaver application server java/7.5
- version/sap netweaver application server java/7.31