What’s Vulnerable › Vulnerabilities

CVE-2019-0365

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-09-10 · updated 2026-06-17

Description

SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.

Affected products

• SAP Startup Service: 7.21, 7.49, 7.53, 7.73, 7.76
• SAP SE SAP Kernel (KRNL32NUC): 7.21, 7.21ext, 7.22, 7.22ext
• SAP SE SAP Kernel (KRNL32UC): 7.21, 7.21ext, 7.22, 7.22ext
• SAP SE SAP Kernel (KRNL64NUC): 7.21, 7.21ext, 7.22, 7.22ext
• SAP SE SAP Kernel (KRNL64UC): 7.21, 7.21ext, 7.22, 7.22ext, 7.49, 7.73

References

• https://launchpad.support.sap.com/#/notes/2786151
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506
• https://launchpad.support.sap.com/#/notes/2786151
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506

Get alerted when CVE-2019-0365 or the next vulnerability affects your stack