CVE-2019-0381

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-10-08 · updated 2026-06-17
Weakness: CWE-552

Description

A binary planting in SAP SQL Anywhere, before version 17.0, SAP IQ, before version 16.1, and SAP Dynamic Tier, before versions 1.0 and 2.0, can result in the inadvertent access of files located in directories outside of the paths specified by the user.

Affected products

SAP Dynamic Tier: 1.0, 2.0
SAP SE SAP IQ: 16.1
SAP SE SAP SQL Anywhere: 17.0

References

https://launchpad.support.sap.com/#/notes/2792430
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050
https://launchpad.support.sap.com/#/notes/2792430
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050

Get alerted when CVE-2019-0381 or the next vulnerability affects your stack