VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Dec 11, 2019· Updated Jun 17, 2026

CVE-2019-0399

CVE-2019-0399

Description

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure.

Affected products

4
  • Microfocus/Project And Portfolio Managementllm-fuzzy
  • SAP SE/SAP Portfolio and Project Management (CPRXRPM)v5
    Range: 500_702
  • SAP SE/SAP Portfolio and Project Management (EPPM)v5
    Range: 100
  • SAP SE/SAP Portfolio and Project Management (S4CORE)v5
    Range: 102

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.