Advanced Business Application Programming Platform Kernel vulnerabilities

Product

Advanced Business Application Programming Platform Kernel

by Sap · last CVE Aug 14, 2019

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 3Medium 1Low 0

Severity

Exploitation

Watch

Add Advanced Business Application Programming Platform Kernel to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-0304	9.8	2%	Jun 12	FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT,… Affected: 7.21; 7.45; 7.49; 7.53; 7.73
CVE-2019-0270	8.8	1%	Mar 12	ABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for an authenticated user, resulting in escalation of privileges Affected: 7.15; 7.21; 7.22; 7.49; 7.53; 7.73; +3 more
CVE-2019-0255	8.1	2%	Feb 15	SAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75, fails to validate type of installation for an ABAP Server system correctly Affected: 7.73; 7.74; 7.75.
CVE-2019-0349	7.2	1%	Aug 14	SAP Kernel (ABAP Debugger), versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21,… Affected: 7.21; 7.21ext; 7.22; 7.22ext; 7.49; 7.53; +4 more
CVE-2019-0265	4.9	2%	Feb 15	SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service Affected: 7.21 through 7.22; 7.45; 7.49; 7.53; 7.73; 7.75.