CVE-2019-0328

Severity: high (CVSS 7.2 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-07-10 · updated 2026-06-17
Weakness: CWE-78

Description

ABAP Tests Modules (SAP Basis, versions 7.0, 7.1, 7.3, 7.31, 7.4, 7.5) of SAP NetWeaver Process Integration enables an attacker the execution of OS commands with privileged rights. An attacker could thereby impact the integrity and availability of the system.

Affected products

SAP SE SAP Process Integration (Integration Builder Framework): 7.0, 7.1, 7.3, 7.4, 7.5, 7.31

References

http://www.securityfocus.com/bid/109067
https://launchpad.support.sap.com/#/notes/2774489
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575
http://www.securityfocus.com/bid/109067
https://launchpad.support.sap.com/#/notes/2774489
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575

Get alerted when CVE-2019-0328 or the next vulnerability affects your stack