Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-0312

Several web pages provided SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 and SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50)

Description

Several web pages provided SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 and SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50) are not password protected. An attacker could access landscape information like host names, ports or other technical data in the absence of restrictive firewall and port settings.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE SAP NetWeaver Process Integration(SAP_XIESR)

  • < 7.10 to 7.11affected
  • < 7.20affected
  • < 7.30affected
  • < 7.31affected
  • < 7.40affected
  • < 7.50affected

SAP SE SAP NetWeaver Process Integration(SAP_XITOOL)

  • < 7.10 to 7.11affected
  • < 7.30affected
  • < 7.31affected
  • < 7.40affected
  • < 7.50affected

References