{"id":"CVE-2019-0328","state":"PUBLISHED","title":"ABAP Tests Modules (SAP Basis, versions 7.0, 7.1, 7.3, 7.31, 7.4, 7.5) of SAP NetWeaver Process Integration enables an attacker the execution of OS commands with privileged rights.","description":"ABAP Tests Modules (SAP Basis, versions 7.0, 7.1, 7.3, 7.31, 7.4, 7.5) of SAP NetWeaver Process Integration enables an attacker the execution of OS commands with privileged rights. An attacker could thereby impact the integrity and availability of the system.","publishedAt":"2019-07-10T19:10:37.000Z","updatedAt":"2024-08-04T17:44:16.476Z","severity":null,"assigner":"sap","products":["SAP SE SAP NetWeaver Process Integration ABAP tests (SAP Basis)"],"affected":[{"vendor":"SAP SE","product":"SAP NetWeaver Process Integration ABAP tests (SAP Basis)","versions":[{"version":"< 7.0","status":"affected"},{"version":"< 7.1","status":"affected"},{"version":"< 7.3","status":"affected"},{"version":"< 7.31","status":"affected"},{"version":"< 7.4","status":"affected"},{"version":"< 7.5","status":"affected"}]}],"references":["http://www.securityfocus.com/bid/109067","https://launchpad.support.sap.com/#/notes/2774489","https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575"],"weaknesses":[],"ingestedAt":"2026-10-29T19:45:08.139Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/0xxx/CVE-2019-0328.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-0328","state":"PUBLISHED","datePublished":"2019-07-10T19:10:37.000Z","dateUpdated":"2024-08-04T17:44:16.476Z","assignerShortName":"sap","assignerOrgId":"e4686d1a-f260-4930-ac4c-2f5c992778dd","dateReserved":"2018-11-26T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"ABAP Tests Modules (SAP Basis, versions 7.0, 7.1, 7.3, 7.31, 7.4, 7.5) of SAP NetWeaver Process Integration enables an attacker the execution of OS commands with privileged rights. An attacker could thereby impact the integrity and availability of the system."}],"affected":[{"vendor":"SAP SE","product":"SAP NetWeaver Process Integration ABAP tests (SAP Basis)","versions":[{"version":"< 7.0","status":"affected"},{"version":"< 7.1","status":"affected"},{"version":"< 7.3","status":"affected"},{"version":"< 7.31","status":"affected"},{"version":"< 7.4","status":"affected"},{"version":"< 7.5","status":"affected"}]}],"references":[{"url":"http://www.securityfocus.com/bid/109067","name":"109067","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://launchpad.support.sap.com/#/notes/2774489","tags":["x_refsource_MISC"]},{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Code Injection","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"sap","dateUpdated":"2019-07-10T19:10:42.000Z","orgId":"e4686d1a-f260-4930-ac4c-2f5c992778dd"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cna@sap.com","ID":"CVE-2019-0328","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"SAP NetWeaver Process Integration ABAP tests (SAP Basis)","version":{"version_data":[{"version_name":"<","version_value":"7.0"},{"version_name":"<","version_value":"7.1"},{"version_name":"<","version_value":"7.3"},{"version_name":"<","version_value":"7.31"},{"version_name":"<","version_value":"7.4"},{"version_name":"<","version_value":"7.5"}]}}]},"vendor_name":"SAP SE"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"ABAP Tests Modules (SAP Basis, versions 7.0, 7.1, 7.3, 7.31, 7.4, 7.5) of SAP NetWeaver Process Integration enables an attacker the execution of OS commands with privileged rights. An attacker could thereby impact the integrity and availability of the system."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Code Injection"}]}]},"references":{"reference_data":[{"name":"109067","refsource":"BID","url":"http://www.securityfocus.com/bid/109067"},{"name":"https://launchpad.support.sap.com/#/notes/2774489","refsource":"MISC","url":"https://launchpad.support.sap.com/#/notes/2774489"},{"name":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575","refsource":"CONFIRM","url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.securityfocus.com/bid/109067","name":"109067","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://launchpad.support.sap.com/#/notes/2774489","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T17:44:16.476Z"}}]}}}