Skip to content
OpenAdvisories
Unscored CVE-2019-0304 EUVD-2019-1077GHSA-cr28-fpxh-wjpp

FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KR…

Published Jun 12, 2019 · Updated Aug 4, 2024 · Assigned by sap

Description

FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, allows an attacker to inject code or specifically manipulated command that can be executed by the application. An attacker could thereby control the behaviour of the application.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver AS ABAP Platform(KRNL32NUC) < 7.21, < 7.21EXT, < 7.22, < 7.22EXT —
SAP SE SAP NetWeaver AS ABAP Platform(KRNL32UC) < 7.21, < 7.21EXT, < 7.22, < 7.22EXT —
SAP SE SAP NetWeaver AS ABAP Platform(KRNL64NUC) < 7.21, < 7.21EXT, < 7.22, < 7.22EXT, < 7.49 —
SAP SE SAP NetWeaver AS ABAP Platform(KRNL64UC) < 7.21, < 7.21EXT, < 7.22, < 7.22EXT, < 7.49, < 7.73 —
SAP SE SAP NetWeaver AS ABAP Platform(KERNEL) < 7.21, < 7.45, < 7.49, < 7.53, < 7.73 —

References