CVE-2019-0312

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-06-12 · updated 2026-06-17
Weakness: CWE-306

Description

Several web pages provided SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 and SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50) are not password protected. An attacker could access landscape information like host names, ports or other technical data in the absence of restrictive firewall and port settings.

Affected products

SAP SE SAP Process Integration (Integration Builder Framework): 7.10, 7.11, 7.20, 7.30, 7.31, 7.40 (+1)

References

https://launchpad.support.sap.com/#/notes/2744086
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242
https://launchpad.support.sap.com/#/notes/2744086
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242

Get alerted when CVE-2019-0312 or the next vulnerability affects your stack