[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0282?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.support.sap.com/#/notes/2742758'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0282?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0283 mean in the context of cybersecurity?

[Assistant] CVE-2019-0283


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0283.

[Assistant] SAP NetWeaver Process Integration (Adapter Engine), fixed in versions 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; is vulnerable to Digital Signature Spoofing. It is possible to spoof XML signatures and send arbitrary requests to the server via PI Axis adapter. These requests will be accepted by the PI Axis adapter even if the payload has been altered, especially when the signed element is the body of the xml document.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0283?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.support.sap.com/#/notes/2747683'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0283?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0284 mean in the context of cybersecurity?

[Assistant] CVE-2019-0284


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0284.

[Assistant] SLD Registration in SAP HANA (fixed in versions 1.0, 2.0) does not sufficiently validate an XML document accepted from an untrusted source. The attacker can call SLDREG with an XML file containing a reference to an XML External Entity (XXE). This can cause SLDREG to, for example, continuously loop, read arbitrary files and even send local files.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0284?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.support.sap.com/#/notes/2772376'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0284?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0285 mean in the context of cybersecurity?

[Assistant] CVE-2019-0285


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0285.

[Assistant] The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive database information including credentials which can be misused by the attacker.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0285?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.support.sap.com/#/notes/2687663'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/153471/SAP-Crystal-Reports-Information-Disclosure.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0285?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0287 mean in the context of cybersecurity?

[Assistant] CVE-2019-0287


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0287.

[Assistant] Under certain conditions SAP BusinessObjects Business Intelligence platform (Central Management Server), versions 4.2 and 4.3, allows an attacker to access information which would otherwise be restricted.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0287?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2737278'}, {'name': '108316', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/108316'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0287?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0289 mean in the context of cybersecurity?

[Assistant] CVE-2019-0289


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0289.

[Assistant] Under certain conditions SAP BusinessObjects Business Intelligence platform (Analysis for OLAP), versions 4.2 and 4.3, allows an attacker to access information which would otherwise be restricted.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0289?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2738796'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0289?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0291 mean in the context of cybersecurity?

[Assistant] CVE-2019-0291


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0291.

[Assistant] Under certain conditions Solution Manager, version 7.2, allows an attacker to access information which would otherwise be restricted.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0291?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2748699'}, {'name': '108313', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/108313'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0291?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0293 mean in the context of cybersecurity?

[Assistant] CVE-2019-0293


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0293.

[Assistant] Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system (ST-PI, before versions 2008_1_700, 2008_1_710, and 740).


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0293?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2756625'}, {'name': '108324', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/108324'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0293?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0298 mean in the context of cybersecurity?

[Assistant] CVE-2019-0298


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0298.

[Assistant] SAP E-Commerce (Business-to-Consumer) application does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. Fixed in the following components SAP-CRMJAV SAP-CRMWEB SAP-SHRWEB SAP-SHRJAV SAP-CRMAPP SAP-SHRAPP, versions 7.30, 7.31, 7.32, 7.33, 7.54.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0298?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2773086'}, {'name': '108314', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/108314'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0298?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0301 mean in the context of cybersecurity?

[Assistant] CVE-2019-0301


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0301.

[Assistant] Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST Interface Version 2, which would otherwise be restricted only for viewing.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0301?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2784307'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0301?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0303 mean in the context of cybersecurity?

[Assistant] CVE-2019-0303


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0303.

[Assistant] SAP BusinessObjects Business Intelligence Platform (Administration Console), versions 4.2, 4.3, module BILogon/appService.jsp is reflecting requested parameter errMsg into response content without sanitation. This could be used by an attacker to build a special url that execute custom JavaScript code when the url is accessed.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0303?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2637997'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0303?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0304 mean in the context of cybersecurity?

[Assistant] CVE-2019-0304


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0304.

[Assistant] FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, allows an attacker to inject code or specifically manipulated command that can be executed by the application. An attacker could thereby control the behaviour of the application.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0304?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2719530'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0304?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0305 mean in the context of cybersecurity?

[Assistant] CVE-2019-0305


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0305.

[Assistant] Java Server Pages (JSPs) provided by the SAP NetWeaver Process Integration (SAP_XIESR and SAP_XITOOL: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50) do not restrict or incorrectly restrict frame objects or UI layers that belong to another application or domain, resulting in Clickjacking vulnerability. Successful exploitation of this vulnerability leads to unwanted modification of user's data.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0305?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2755502'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0305?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0306 mean in the context of cybersecurity?

[Assistant] CVE-2019-0306


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0306.

[Assistant] SAP HANA Extended Application Services (advanced model), version 1, allows authenticated low privileged XS Advanced Platform users such as SpaceAuditors to execute requests to obtain a complete list of SAP HANA user IDs and names.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0306?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2771128'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0306?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0307 mean in the context of cybersecurity?

[Assistant] CVE-2019-0307


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0307.

[Assistant] Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communication in the SAP Secure Storage file which is not encrypted by default. By decoding these credentials, an attacker with admin privileges could gain access to the entire configuration, but no system sensitive information can be gained.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0307?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2772266'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0307?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0308 mean in the context of cybersecurity?

[Assistant] CVE-2019-0308


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0308.

[Assistant] An authenticated attacker in SAP E-Commerce (Business-to-Consumer application), versions 7.3, 7.31, 7.32, 7.33, 7.54, can change the price of the product to zero and also checkout, by injecting an HTML code in the application that will be executed whenever the victim logs in to the application even on a different machine, leading to Code Injection.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0308?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2773493'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0308?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0311 mean in the context of cybersecurity?

[Assistant] CVE-2019-0311


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0311.

[Assistant] Automotive Dealer Portal in SAP R/3 Enterprise Application (versions: 600, 602, 603, 604, 605, 606, 616, 617) does not sufficiently encode user-controlled inputs, this makes it possible for an attacker to send unwanted scripts to the browser of the victim using unwanted input and execute malicious code there, resulting in Cross-Site Scripting (XSS) vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0311?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2728153'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0311?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0312 mean in the context of cybersecurity?

[Assistant] CVE-2019-0312


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0312.

[Assistant] Several web pages provided SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 and SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50) are not password protected. An attacker could access landscape information like host names, ports or other technical data in the absence of restrictive firewall and port settings.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0312?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2744086'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0312?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0314 mean in the context of cybersecurity?

[Assistant] CVE-2019-0314


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0314.

[Assistant] SAP Work Manager, versions: 6.3, 6.4, 6.5 and SAP Inventory Manager, version 4.3, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0314?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2793805'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0314?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0315 mean in the context of cybersecurity?

[Assistant] CVE-2019-0315


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0315.

[Assistant] Under certain conditions the PI Integration Builder Web UI of SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50 and SAP_XIPCK 7.10 to 7.11, 7.20, 7.30) allows an attacker to access passwords used in FTP channels leading to information disclosure.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0315?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2755438'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0315?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0316 mean in the context of cybersecurity?

[Assistant] CVE-2019-0316


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0316.

[Assistant] SAP NetWeaver Process Integration, versions: SAP_XIESR: 7.20, SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate user-controlled inputs, which allows an attacker possessing admin privileges to read and modify data from the victim’s browser, by injecting malicious scripts in certain servlets, which will be executed when the victim is tricked to click on those malicious links, resulting in reflected Cross Site Scripting vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0316?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2745917'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0316?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0318 mean in the context of cybersecurity?

[Assistant] CVE-2019-0318


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0318.

[Assistant] Under certain conditions SAP NetWeaver Application Server for Java (Startup Framework), versions 7.21, 7.22, 7.45, 7.49, and 7.53, allows an attacker to access information which would otherwise be restricted.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0318?

[Assistant] {'name': '109069', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/109069'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2738791'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0318?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0319 mean in the context of cybersecurity?

[Assistant] CVE-2019-0319


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0319.

[Assistant] The SAP Gateway, versions 7.5, 7.51, 7.52 and 7.53, allows an attacker to inject content which is displayed in the form of an error message. An attacker could thus mislead a user to believe this information is from the legitimate service when it's not.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0319?

[Assistant] {'name': '109074', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/109074'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2752614'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575'}, {'tags': ['x_refsource_MISC'], 'url': 'https://cxsecurity.com/ascii/WLB-2019050283'}, {'tags': ['x_refsource_MISC'], 'url': 'https://drive.google.com/open?id=1aGFqggvydehSK7MFIsfKW7tO60yiF55f'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/153661/SAPUI5-1.0.0-SAP-Gateway-7.5-7.51-7.52-7.53-Content-Spoofing.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2911267'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0319?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0321 mean in the context of cybersecurity?

[Assistant] CVE-2019-0321


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0321.

[Assistant] ABAP Server and ABAP Platform (SAP Basis), versions, 7.31, 7.4, 7.5, do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0321?

[Assistant] {'name': '109078', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/109078'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2773888'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0321?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0322 mean in the context of cybersecurity?

[Assistant] CVE-2019-0322


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0322.

[Assistant] SAP Commerce Cloud (previously known as SAP Hybris Commerce), (HY_COM, versions 6.3, 6.4, 6.5, 6.6, 6.7, 1808, 1811), allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0322?

[Assistant] {'name': '109076', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/109076'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2781873'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0322?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0325 mean in the context of cybersecurity?

[Assistant] CVE-2019-0325


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0325.

[Assistant] SAP ERP HCM (SAP_HRCES) , version 3, does not perform necessary authorization checks for a report that reads payroll data of employees in a certain area. Due to this under certain conditions, the user that once had authorization to payroll data of an employee, which was later revoked, may retain access to the same data.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0325?

[Assistant] {'name': '109075', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/109075'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2798133'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0325?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0326 mean in the context of cybersecurity?

[Assistant] CVE-2019-0326


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0326.

[Assistant] SAP BusinessObjects Business Intelligence Platform (BI Workspace) (Enterprise), versions 4.1, 4.2, 4.3, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0326?

[Assistant] {'name': '109072', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/109072'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2764733'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0326?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0327 mean in the context of cybersecurity?

[Assistant] CVE-2019-0327


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0327.

[Assistant] SAP NetWeaver for Java Application Server - Web Container, (engineapi, versions 7.1, 7.2, 7.3, 7.31, 7.4 and 7.5), (servercode, versions 7.2, 7.3, 7.31, 7.4, 7.5), allows an attacker to upload files (including script files) without proper file format validation.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0327?

[Assistant] {'name': '109071', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/109071'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2777910'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0327?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0328 mean in the context of cybersecurity?

[Assistant] CVE-2019-0328


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0328.

[Assistant] ABAP Tests Modules (SAP Basis, versions 7.0, 7.1, 7.3, 7.31, 7.4, 7.5) of SAP NetWeaver Process Integration enables an attacker the execution of OS commands with privileged rights. An attacker could thereby impact the integrity and availability of the system.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0328?

[Assistant] {'name': '109067', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/109067'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2774489'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0328?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0329 mean in the context of cybersecurity?

[Assistant] CVE-2019-0329


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0329.

[Assistant] SAP Information Steward, version 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0329?

[Assistant] {'name': '109070', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/109070'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2804833'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0329?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0330 mean in the context of cybersecurity?

[Assistant] CVE-2019-0330


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0330.

[Assistant] The OS Command Plugin in the transaction GPA_ADMIN and the OSCommand Console of SAP Diagnostic Agent (LM-Service), version 7.2, allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0330?

[Assistant] {'name': '109068', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/109068'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2808158'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0330?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0331 mean in the context of cybersecurity?

[Assistant] CVE-2019-0331


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0331.

[Assistant] Under certain conditions, SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, allows an attacker to access sensitive data such as directory structure, leading to Information Disclosure.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0331?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2742468'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0331?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0332 mean in the context of cybersecurity?

[Assistant] CVE-2019-0332


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0332.

[Assistant] SAP BusinessObjects Business Intelligence Platform (Info View), versions 4.1, 4.2, 4.3, allows an attacker to give some payload for keyword in the search and it will be executed while search performs its action, resulting in Cross-Site Scripting (XSS) vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0332?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2742468'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0332?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0333 mean in the context of cybersecurity?

[Assistant] CVE-2019-0333


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0333.

[Assistant] In some situations, when a client cancels a query in SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.2, 4.3, the attacker can then query and receive the whole data set instead of just what is part of their authorized security profile, resulting in Information Disclosure.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0333?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2764513'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0333?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0334 mean in the context of cybersecurity?

[Assistant] CVE-2019-0334


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0334.

[Assistant] When creating a module in SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, it is possible to store a malicious script which when executed later could potentially allow a user to escalate privileges via session hijacking. The attacker could also access other sensitive information, leading to Stored Cross Site Scripting.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0334?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2771221'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0334?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0335 mean in the context of cybersecurity?

[Assistant] CVE-2019-0335


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0335.

[Assistant] Under certain conditions SAP BusinessObjects Business Intelligence Platform (Central Management Console), versions 4.1, 4.2, 4.3, allows an attacker to store a malicious payload within the description field of a user account. The payload is triggered when the mouse cursor is moved over the description field in the list, when generating the little yellow informational pop up box, resulting in Stored Cross Site Scripting Attack.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0335?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2742468'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0335?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0337 mean in the context of cybersecurity?

[Assistant] CVE-2019-0337


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0337.

[Assistant] Java Proxy Runtime of SAP NetWeaver Process Integration, versions 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs and allows an attacker to execute malicious scripts in the url thereby resulting in Reflected Cross-Site Scripting (XSS) vulnerability


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0337?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2789866'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0337?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0338 mean in the context of cybersecurity?

[Assistant] CVE-2019-0338


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0338.

[Assistant] During an OData V2/V4 request in SAP Gateway, versions 750, 751, 752, 753, the HTTP Header attributes cache-control and pragma were not properly set, allowing an attacker to access restricted information, resulting in Information Disclosure.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0338?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2793351'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0338?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0340 mean in the context of cybersecurity?

[Assistant] CVE-2019-0340


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0340.

[Assistant] The XML parser, which is being used by SAP Enable Now, before version 1902, has not been hardened correctly, leading to Missing XML Validation vulnerability. This issue affects the file upload at multiple locations. An attacker can read local XXE files.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0340?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2794742'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0340?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0341 mean in the context of cybersecurity?

[Assistant] CVE-2019-0341


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0341.

[Assistant] The session cookie used by SAP Enable Now, version 1902, does not have the HttpOnly flag set. If an attacker runs script code in the context of the application, he could get access to the session cookie. The session cookie could then be abused to gain access to the application.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0341?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2794742'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0341?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0343 mean in the context of cybersecurity?

[Assistant] CVE-2019-0343


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0343.

[Assistant] SAP Commerce Cloud (Mediaconversion Extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, allows an authenticated Backoffice/HMC user to inject code that can be executed by the application, leading to Code Injection. An attacker could thereby control the behavior of the application.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0343?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2786035'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0343?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0344 mean in the context of cybersecurity?

[Assistant] CVE-2019-0344


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0344.

[Assistant] Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hybris' user rights, resulting in Code Injection.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0344?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2786035'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0344?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0345 mean in the context of cybersecurity?

[Assistant] CVE-2019-0345


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0345.

[Assistant] A remote unauthenticated attacker can abuse a web service in SAP NetWeaver Application Server for Java (Administrator System Overview), versions 7.30, 7.31, 7.40, 7.50, by sending a specially crafted XML file and trick the application server into leaking authentication credentials for its own SAP Management console, resulting in Server-Side Request Forgery.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0345?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2813811'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0345?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0346 mean in the context of cybersecurity?

[Assistant] CVE-2019-0346


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0346.

[Assistant] Unencrypted communication error in SAP Business Objects Business Intelligence Platform (Central Management Console), version 4.2, leads to disclosure of list of user names and roles imported from SAP NetWeaver BI systems, resulting in Information Disclosure.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0346?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2764513'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0346?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0348 mean in the context of cybersecurity?

[Assistant] CVE-2019-0348


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0348.

[Assistant] SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.1, 4.2, can access database with unencrypted connection, even if the quality of protection should be encrypted.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0348?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2751470'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0348?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0349 mean in the context of cybersecurity?

[Assistant] CVE-2019-0349


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0349.

[Assistant] SAP Kernel (ABAP Debugger), versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.49, 7.53, 7.73, 7.75, 7.76, 7.77, allows a user to execute “Go to statement” without possessing the authorization S_DEVELOP DEBUG 02, resulting in Missing Authorization Check


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0349?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2798743'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0349?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0350 mean in the context of cybersecurity?

[Assistant] CVE-2019-0350


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0350.

[Assistant] SAP HANA Database, versions 1.0, 2.0, allows an unauthorized attacker to send a malformed connection request, which crashes the indexserver of an SAP HANA instance, leading to Denial of Service


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0350?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2798243'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0350?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0351 mean in the context of cybersecurity?

[Assistant] CVE-2019-0351


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0351.

[Assistant] A remote code execution vulnerability exists in the SAP NetWeaver UDDI Server (Services Registry), versions 7.10, 7.20, 7.30, 7.31, 7.40, 7.50. Because of this, an attacker can exploit Services Registry potentially enabling them to take complete control of the product, including viewing, changing, or deleting data by injecting code into the working memory which is subsequently executed by the application. It can also be used to cause a general fault in the product, causing the product to terminate.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0351?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2800779'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0351?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0352 mean in the context of cybersecurity?

[Assistant] CVE-2019-0352


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0352.

[Assistant] In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages (like jsp) are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logout.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0352?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2735924'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0352?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0353 mean in the context of cybersecurity?

[Assistant] CVE-2019-0353


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0353.

[Assistant] Under certain conditions SAP Business One client (B1_ON_HANA, SAP-M-BO), before versions 9.2 and 9.3, allows an attacker to access information which would otherwise be restricted.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0353?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2768864'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0353?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0355 mean in the context of cybersecurity?

[Assistant] CVE-2019-0355


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0355.

[Assistant] SAP NetWeaver Application Server Java Web Container, ENGINEAPI (before versions 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) and SAP-JEECOR (before versions 6.40, 7.0, 7.01), allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0355?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2798336'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0355?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0356 mean in the context of cybersecurity?

[Assistant] CVE-2019-0356


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0356.

[Assistant] Under certain conditions SAP NetWeaver Process Integration Runtime Workbench – MESSAGING and SAP_XIAF (before versions 7.31, 7.40, 7.50) allows an attacker to access information which would otherwise be restricted.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0356?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2802521'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0356?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0357 mean in the context of cybersecurity?

[Assistant] CVE-2019-0357


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0357.

[Assistant] The administrator of SAP HANA database, before versions 1.0 and 2.0, can misuse HANA to execute commands with operating system "root" privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0357?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2829681'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0357?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0361 mean in the context of cybersecurity?

[Assistant] CVE-2019-0361


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0361.

[Assistant] SAP Supplier Relationship Management (Master Data Management Catalog - SRM_MDM_CAT, before versions 3.73, 7.31, 7.32) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0361?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2820607'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0361?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0363 mean in the context of cybersecurity?

[Assistant] CVE-2019-0363


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0363.

[Assistant] Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to overload the server or retrieve information about internal network ports.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0363?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2817491'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0363?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0364 mean in the context of cybersecurity?

[Assistant] CVE-2019-0364


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0364.

[Assistant] Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to enumerate open ports.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0364?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2817491'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0364?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0365 mean in the context of cybersecurity?

[Assistant] CVE-2019-0365


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0365.

[Assistant] SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0365?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2786151'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0365?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0367 mean in the context of cybersecurity?

[Assistant] CVE-2019-0367


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0367.

[Assistant] SAP NetWeaver Process Integration (B2B Toolkit), before versions 1.0 and 2.0, does not perform necessary authorization checks for an authenticated user, allowing the import of B2B table content that leads to Missing Authorization Check.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0367?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2805777'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0367?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0368 mean in the context of cybersecurity?

[Assistant] CVE-2019-0368


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0368.

[Assistant] SAP Customer Relationship Management (Email Management), versions: S4CRM before 1.0 and 2.0, BBPCRM before 7.0, 7.01, 7.02, 7.12, 7.13 and 7.14, does not sufficiently encode user-controlled inputs within the mail client resulting in Cross-Site Scripting vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0368?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2751806'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0368?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0369 mean in the context of cybersecurity?

[Assistant] CVE-2019-0369


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0369.

[Assistant] SAP Financial Consolidation, before versions 10.0 and 10.1, does not sufficiently encode user-controlled inputs, which allows an attacker to execute scripts by uploading files containing malicious scripts, leading to reflected cross site scripting vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0369?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2806403'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0369?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0370 mean in the context of cybersecurity?

[Assistant] CVE-2019-0370


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0370.

[Assistant] Due to missing input validation, SAP Financial Consolidation, before versions 10.0 and 10.1, enables an attacker to use crafted input to interfere with the structure of the surrounding query leading to XPath Injection.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0370?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2806403'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0370?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0374 mean in the context of cybersecurity?

[Assistant] CVE-2019-0374


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0374.

[Assistant] SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows execution of scripts in the chart title resulting in reflected Cross-Site Scripting


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0374?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2817945'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0374?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0375 mean in the context of cybersecurity?

[Assistant] CVE-2019-0375


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0375.

[Assistant] SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows execution of scripts in the export dialog box of the report name resulting in reflected Cross-Site Scripting.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0375?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2817945'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0375?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0376 mean in the context of cybersecurity?

[Assistant] CVE-2019-0376


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0376.

[Assistant] SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows an attacker to save malicious scripts in the publication name, which can be executed later by the victim, resulting in Stored Cross-Site Scripting.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0376?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2817945'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0376?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0377 mean in the context of cybersecurity?

[Assistant] CVE-2019-0377


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0377.

[Assistant] SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2, does not sufficiently encode user-controlled inputs and allows an attacker to store malicious scripts in the input controls, resulting in Stored Cross-Site Scripting.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0377?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2817945'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0377?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0378 mean in the context of cybersecurity?

[Assistant] CVE-2019-0378


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0378.

[Assistant] SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before version 4.2, does not sufficiently encode user-controlled inputs and allows an attacker to store malicious scripts in the file name of the background image resulting in Stored Cross-Site Scripting.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0378?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2817945'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0378?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0379 mean in the context of cybersecurity?

[Assistant] CVE-2019-0379


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0379.

[Assistant] SAP Process Integration, business-to-business add-on, versions 1.0, 2.0, does not perform authentication check properly when the default security provider is changed to BouncyCastle (BC), leading to Missing Authentication Check


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0379?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2826015'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0379?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0380 mean in the context of cybersecurity?

[Assistant] CVE-2019-0380


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0380.

[Assistant] Under certain conditions, SAP Landscape Management enterprise edition, before version 3.0, allows custom secure parameters’ default values to be part of the application logs leading to Information Disclosure.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0380?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2828682'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0380?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0381 mean in the context of cybersecurity?

[Assistant] CVE-2019-0381


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0381.

[Assistant] A binary planting in SAP SQL Anywhere, before version 17.0, SAP IQ, before version 16.1, and SAP Dynamic Tier, before versions 1.0 and 2.0, can result in the inadvertent access of files located in directories outside of the paths specified by the user.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0381?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2792430'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0381?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0382 mean in the context of cybersecurity?

[Assistant] CVE-2019-0382


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0382.

[Assistant] A Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform (Web Intelligence-Publication related pages); corrected in version 4.2. Privileges are required in order to exploit this vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0382?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2817937'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0382?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0383 mean in the context of cybersecurity?

[Assistant] CVE-2019-0383


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0383.

[Assistant] Transaction Management in SAP Treasury and Risk Management (corrected in S4CORE versions 1.01, 1.02, 1.03, 1.04 and EA-FINSERV versions 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0383?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2819170'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0383?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0384 mean in the context of cybersecurity?

[Assistant] CVE-2019-0384


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0384.

[Assistant] Transaction Management in SAP Treasury and Risk Management (corrected in S4CORE versions 1.01, 1.02, 1.03, 1.04 and EA-FINSERV versions 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for functionalities that require user identity.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0384?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2828981'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0384?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0385 mean in the context of cybersecurity?

[Assistant] CVE-2019-0385


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0385.

[Assistant] SAP Enable Now, before version 1908, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0385?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2833771'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0385?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0386 mean in the context of cybersecurity?

[Assistant] CVE-2019-0386


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0386.

[Assistant] Order processing in SAP ERP Sales (corrected in SAP_APPL 6.0, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18) and S4HANA Sales (corrected in S4CORE 1.0, 1.01, 1.02, 1.03, 1.04) does not execute the required authorization checks for an authenticated user, which can result in an escalation of privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0386?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2840520'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0386?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0388 mean in the context of cybersecurity?

[Assistant] CVE-2019-0388


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0388.

[Assistant] SAP UI5 HTTP Handler (corrected in SAP_UI versions 7.5, 7.51, 7.52, 7.53, 7.54 and SAP UI_700 version 2.0) allows an attacker to manipulate content due to insufficient URL validation.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0388?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2843016'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0388?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0389 mean in the context of cybersecurity?

[Assistant] CVE-2019-0389


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0389.

[Assistant] An administrator of SAP NetWeaver Application Server Java (J2EE-Framework), (corrected in versions 7.1, 7.2, 7.3, 7.31, 7.4, 7.5), may change privileges for all or some functions in Java Server, and enable users to execute functions, they are not allowed to execute otherwise.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0389?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2814357'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0389?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0390 mean in the context of cybersecurity?

[Assistant] CVE-2019-0390


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0390.

[Assistant] Under certain conditions SAP Data Hub (corrected in DH_Foundation version 2) allows an attacker to access information which would otherwise be restricted. Connection details that are maintained in Connection Manager are visible to users.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0390?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2842034'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0390?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0391 mean in the context of cybersecurity?

[Assistant] CVE-2019-0391


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0391.

[Assistant] Under certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) allows an attacker to access information which would otherwise be restricted.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0391?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2835226'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0391?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0393 mean in the context of cybersecurity?

[Assistant] CVE-2019-0393


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0393.

[Assistant] An SQL Injection vulnerability in SAP Quality Management (corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03) allows an attacker to carry out targeted database queries that can read individual fields of historical inspection results.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0393?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2816035'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0393?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0395 mean in the context of cybersecurity?

[Assistant] CVE-2019-0395


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0395.

[Assistant] SAP BusinessObjects Business Intelligence Platform (Fiori BI Launchpad), before version 4.2, allows execution of JavaScript in a text module in Fiori BI Launchpad, leading to Stored Cross Site Scripting vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0395?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.support.sap.com/#/notes/2830578'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0395?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0396 mean in the context of cybersecurity?

[Assistant] CVE-2019-0396


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0396.

[Assistant] SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected in versions 4.1 and 4.2, does not sufficiently validate an XML document accepted from an untrusted source. An attacker can craft a message that contains malicious elements that will not be correctly filtered by Web Intelligence HTML interface in some specific workflows.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0396?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2814007'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0396?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0398 mean in the context of cybersecurity?

[Assistant] CVE-2019-0398


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0398.

[Assistant] Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform (Monitoring Application), before versions 4.1, 4.2 and 4.3, may lead to an authenticated user to send unintended request to the web server, leading to Cross Site Request Forgery.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0398?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.support.sap.com/#/notes/2701027'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0398?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0399 mean in the context of cybersecurity?

[Assistant] CVE-2019-0399


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0399.

[Assistant] SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0399?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.support.sap.com/#/notes/2803554'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0399?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0402 mean in the context of cybersecurity?

[Assistant] CVE-2019-0402


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0402.

[Assistant] SAP Adaptive Server Enterprise, before versions 15.7 and 16.0, under certain conditions exposes some sensitive information to the admin, leading to Information Disclosure.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0402?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.support.sap.com/#/notes/2845780'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0402?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0403 mean in the context of cybersecurity?

[Assistant] CVE-2019-0403


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0403.

[Assistant] SAP Enable Now, before version 1911, allows an attacker to input commands into the CSV files, which will be executed when opened, leading to CSV Command Injection.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2019-0403?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.support.sap.com/#/notes/2845183'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0403?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2019-0404 mean in the context of cybersecurity?

[Assistant] CVE-2019-0404


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0404.

[Assistant] SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading to Information Disclosure.