{"id":"CVE-2019-0393","state":"PUBLISHED","title":"An SQL Injection vulnerability in SAP Quality Management (corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03) allows an attacker to carry out targeted database queries that can rea","description":"An SQL Injection vulnerability in SAP Quality Management (corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03) allows an attacker to carry out targeted database queries that can read individual fields of historical inspection results.","publishedAt":"2019-11-13T21:59:55.000Z","updatedAt":"2024-08-04T17:51:26.616Z","severity":null,"assigner":"sap","products":["SAP SE SAP Quality Management (S4CORE)"],"affected":[{"vendor":"SAP SE","product":"SAP Quality Management (S4CORE)","versions":[{"version":"< 1.0","status":"affected"},{"version":"< 1.01","status":"affected"},{"version":"< 1.02","status":"affected"},{"version":"< 1.03","status":"affected"}]}],"references":["https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390","https://launchpad.support.sap.com/#/notes/2816035"],"weaknesses":[],"ingestedAt":"2026-10-29T19:45:08.139Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/0xxx/CVE-2019-0393.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-0393","state":"PUBLISHED","datePublished":"2019-11-13T21:59:55.000Z","dateUpdated":"2024-08-04T17:51:26.616Z","assignerShortName":"sap","assignerOrgId":"e4686d1a-f260-4930-ac4c-2f5c992778dd","dateReserved":"2018-11-26T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An SQL Injection vulnerability in SAP Quality Management (corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03) allows an attacker to carry out targeted database queries that can read individual fields of historical inspection results."}],"affected":[{"vendor":"SAP SE","product":"SAP Quality Management (S4CORE)","versions":[{"version":"< 1.0","status":"affected"},{"version":"< 1.01","status":"affected"},{"version":"< 1.02","status":"affected"},{"version":"< 1.03","status":"affected"}]}],"references":[{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390","tags":["x_refsource_MISC"]},{"url":"https://launchpad.support.sap.com/#/notes/2816035","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"SQL Injection","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"sap","dateUpdated":"2019-11-13T21:59:55.000Z","orgId":"e4686d1a-f260-4930-ac4c-2f5c992778dd"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cna@sap.com","ID":"CVE-2019-0393","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"SAP Quality Management (S4CORE)","version":{"version_data":[{"version_name":"<","version_value":"1.0"},{"version_name":"<","version_value":"1.01"},{"version_name":"<","version_value":"1.02"},{"version_name":"<","version_value":"1.03"}]}}]},"vendor_name":"SAP SE"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An SQL Injection vulnerability in SAP Quality Management (corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03) allows an attacker to carry out targeted database queries that can read individual fields of historical inspection results."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"SQL Injection"}]}]},"references":{"reference_data":[{"name":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390","refsource":"MISC","url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390"},{"name":"https://launchpad.support.sap.com/#/notes/2816035","refsource":"MISC","url":"https://launchpad.support.sap.com/#/notes/2816035"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://launchpad.support.sap.com/#/notes/2816035","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T17:51:26.616Z"}}]}}}