VYPR
← All advisories
High severity7.2NVD Advisory· Published Jul 10, 2019· Updated Jun 17, 2026

CVE-2019-0327

CVE-2019-0327

Description

SAP NetWeaver for Java Application Server - Web Container, (engineapi, versions 7.1, 7.2, 7.3, 7.31, 7.4 and 7.5), (servercode, versions 7.2, 7.3, 7.31, 7.4, 7.5), allows an attacker to upload files (including script files) without proper file format validation.

Affected products

11
  • SAP/Netweaver Application Server Java7 versions
    cpe:2.3:a:sap:netweaver_application_server_java:7.10:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:sap:netweaver_application_server_java:7.10:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_java:7.20:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_java:7.30:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_java:7.31:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_java:7.40:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_java:7.50:*:*:*:*:*:*:*
    • (no CPE)range: 7.1, 7.2, 7.3, 7.31, 7.4, 7.5
  • SAP/servercodellm-create
    Range: 7.2, 7.3, 7.31, 7.4, 7.5
  • SAP/ENGINEAPIllm-fuzzy
    Range: 7.1, 7.2, 7.3, 7.31, 7.4, 7.5
  • SAP SE/SAP NetWeaver for Java Application Server - Web Container (engineapi)v5
    Range: < 7.1
  • SAP SE/SAP NetWeaver for Java Application Server - Web Container (servercode)v5
    Range: < 7.2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.