CVE-2019-0363 in HANA Extended Application Services

Riassunto

di MITRE

Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to overload the server or retrieve information about internal network ports.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 26/11/2018
• Moderazione: accettato
• Voce: VDB-141523
• CPE: pronto
• CWE: CWE-20 (confermato)
• CVSS: 7.1 (NVD)
• EPSS: 0.00897
• KEV: no
• Attività: molto basso
• Settore: Chemical, Hostingprovider, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-0363
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-0363
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-0363/