PT-2019-11211 · Sap · Sap Cloud Connector

Published 2019-01-08 · Updated 2019-01-17 · CVE-2019-0247

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: SAP Cloud Connector versions prior to 2.11.3

Description: The issue allows an attacker to inject code that can be executed by the application, potentially controlling the application's behavior.

Recommendations: For versions prior to 2.11.3, update to version 2.11.3 or later to resolve the issue.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2019-0247

Affected Products

Sap Cloud Connector

References · 4

• https://osv.dev/vulnerability/CVE-2019-0247 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0247 · Security Note
• https://launchpad.support.sap.com/#/notes/2696233 · Vendor Advisory
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985 · Vendor Advisory