VYPR
← All advisories
High severity7.2NVD Advisory· Published Sep 10, 2019· Updated Jun 17, 2026

CVE-2019-0355

CVE-2019-0355

Description

SAP NetWeaver Application Server Java Web Container, ENGINEAPI (before versions 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) and SAP-JEECOR (before versions 6.40, 7.0, 7.01), allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application.

Affected products

10
  • SAP/Netweaver Application Server Java6 versions
    cpe:2.3:a:sap:netweaver_application_server_java:7.10:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:sap:netweaver_application_server_java:7.10:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_java:7.20:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_java:7.30:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_java:7.31:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_java:7.40:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_java:7.50:*:*:*:*:*:*:*
  • SAP/NetWeaver for Java Application Server - Web Containerllm-fuzzy
    Range: <7.10, <7.20, <7.30, <7.31, <7.40, <7.50
  • SAP/SAP-JEECORllm-fuzzy
    Range: <6.40, <7.0, <7.01
  • SAP SE/SAP NetWeaver AS for Java (Web Container)-ENGINEAPIv5
    Range: < 7.10
  • SAP SE/SAP NetWeaver AS for Java (Web Container)-SAP-JEECORv5
    Range: < 6.40

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.