High severity8.8NVD Advisory· Published Jan 8, 2019· Updated Jun 17, 2026

CVE-2019-0243

Description

Under some circumstances, masterdata maintenance in SAP BW/4HANA (fixed in DW4CORE version 1.0 (SP08)) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Affected products

SAP/Bw\/4hana2 versions
cpe:2.3:a:sap:bw\/4hana:1.0:sp08:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sap:bw\/4hana:1.0:sp08:*:*:*:*:*:*
- (no CPE)range: = 1.0 (SP08)
SAP SE/SAP BW/4HANA (DW4CORE)v5
Range: < 1.0 (SP08)

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/106467nvdThird Party AdvisoryVDB Entry
launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000