Medium severity5.9NVD Advisory· Published Jan 8, 2019· Updated Jun 17, 2026

CVE-2019-0248

Description

Under certain conditions SAP Gateway of ABAP Application Server (fixed in SAP_GWFND 7.5, 7.51, 7.52, 7.53; SAP_BASIS 7.5) allows an attacker to access information which would otherwise be restricted.

Affected products

SAP/BASIS
cpe:2.3:a:sap:basis:7.5:*:*:*:*:*:*:*
SAP/Netweaver4 versions
cpe:2.3:a:sap:netweaver:7.51:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:sap:netweaver:7.51:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver:7.52:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver:7.53:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver:7.5:*:*:*:*:*:*:*
SAP/Gatewayllm-fuzzy
SAP SE/SAP Gateway of ABAP Application Server(SAP_BASIS)v5
Range: < 7.5
SAP SE/SAP Gateway of ABAP Application Server(SAP_GWFND)v5
Range: < 7.5

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/106471nvdThird Party AdvisoryVDB Entry
launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000