VYPR
← All advisories
High severity8.8NVD Advisory· Published Aug 14, 2019· Updated Jun 17, 2026

CVE-2019-0351

CVE-2019-0351

Description

A remote code execution vulnerability exists in the SAP NetWeaver UDDI Server (Services Registry), versions 7.10, 7.20, 7.30, 7.31, 7.40, 7.50. Because of this, an attacker can exploit Services Registry potentially enabling them to take complete control of the product, including viewing, changing, or deleting data by injecting code into the working memory which is subsequently executed by the application. It can also be used to cause a general fault in the product, causing the product to terminate.

Affected products

8
  • SAP/Netweaver6 versions
    cpe:2.3:a:sap:netweaver:7.10:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:sap:netweaver:7.10:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.20:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.30:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.31:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.40:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.50:*:*:*:*:*:*:*
  • SAP/NetWeaver UDDI Serverllm-fuzzy
    Range: 7.10, 7.20, 7.30, 7.31, 7.40, 7.50
  • SAP SE/SAP NetWeaver UDDI Server (Services Registry)v5
    Range: < 7.10

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.