Medium severity4.3NVD Advisory· Published Nov 13, 2019· Updated Jun 17, 2026
CVE-2019-0393
CVE-2019-0393
Description
An SQL Injection vulnerability in SAP Quality Management (corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03) allows an attacker to carry out targeted database queries that can read individual fields of historical inspection results.
Affected products
6cpe:2.3:a:sap:quality_management:1.01:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:sap:quality_management:1.01:*:*:*:*:*:*:*
- cpe:2.3:a:sap:quality_management:1.02:*:*:*:*:*:*:*
- cpe:2.3:a:sap:quality_management:1.03:*:*:*:*:*:*:*
- cpe:2.3:a:sap:quality_management:1.0:*:*:*:*:*:*:*
- (no CPE)
- SAP SE/SAP Quality Management (S4CORE)v5Range: < 1.0
Patches
Vulnerability mechanics
References
2- launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
- wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory
News mentions
0No linked articles in our index yet.