CVE-2019-0327

Severity: high (CVSS 7.2 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-07-10 · updated 2026-06-17
Weakness: CWE-434

Description

SAP NetWeaver for Java Application Server - Web Container, (engineapi, versions 7.1, 7.2, 7.3, 7.31, 7.4 and 7.5), (servercode, versions 7.2, 7.3, 7.31, 7.4, 7.5), allows an attacker to upload files (including script files) without proper file format validation.

Affected products

SAP NetWeaver AS Java: 7.10, 7.20, 7.30, 7.31, 7.40, 7.50

References

http://www.securityfocus.com/bid/109071
https://launchpad.support.sap.com/#/notes/2777910
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575
http://www.securityfocus.com/bid/109071
https://launchpad.support.sap.com/#/notes/2777910
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575

Get alerted when CVE-2019-0327 or the next vulnerability affects your stack