What’s Vulnerable › Vulnerabilities
CVE-2019-0304
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2019-06-12 · updated 2026-06-17
- Weakness: CWE-74
Description
FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, allows an attacker to inject code or specifically manipulated command that can be executed by the application. An attacker could thereby control the behaviour of the application.
Affected products
- SAP Advanced Business Application Programming Platform Kernel: 7.21, 7.45, 7.49, 7.53, 7.73
- SAP Advanced Business Application Programming Platform Krnl32Nuc: 7.21, 7.21ext, 7.22, 7.22ext
- SAP Advanced Business Application Programming Platform Krnl32Uc: 7.21, 7.21ext, 7.22, 7.22ext
- SAP Advanced Business Application Programming Platform Krnl64Nuc: 7.21, 7.21ext, 7.22, 7.22ext, 7.49
- SAP Advanced Business Application Programming Platform Krnl64Uc: 7.21, 7.21ext, 7.22, 7.22ext, 7.49, 7.73
References
- https://launchpad.support.sap.com/#/notes/2719530
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242
- https://launchpad.support.sap.com/#/notes/2719530
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242
Get alerted when CVE-2019-0304 or the next vulnerability affects your stack