VULNERABILITY INTELLIGENCE

CVE-2019-0257

CVSS score8.8 HIGH

EPSS probability1.39%

CISA KEVNot currently listed

Published2019-02-15

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Weakness classification

nvd@nist.gov: CWE-862

Primary references

cna@sap.com — Third Party Advisory, VDB Entry
cna@sap.com — Permissions Required, Vendor Advisory
cna@sap.com — Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Vendor Advisory