Business Application Software Integrated Solution vulnerabilities

Product

Business Application Software Integrated Solution

by Sap · last CVE Apr 10, 2019

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities6 In the news0 Timeline

Severity mix

Critical 0High 5Medium 1Low 0

Severity

All severities6 Critical0 High5 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Business Application Software Integrated Solution to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-0279	8.8	1%	Apr 10	ABAP BASIS function modules INST_CREATE_R3_RFC_DEST, INST_CREATE_TCPIP_RFCDEST, and INST_CREATE_TCPIP_RFC_DEST in SAP BASIS (fixed in versions 7.0 to 7.02, 7.10 to 7.30, 7.31,… Affected: 7.00 through 7.02; 7.10 through 7.30; 7.50 through 7.53; 7.31; 7.40
CVE-2018-2367	8.8	2%	Mar 1	ABAP File Interface in, SAP BASIS, from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker to exploit insufficient validation of path… Affected: 7.00 through 7.02; 7.10 through 7.11; 7.50 through 7.52; 7.30; 7.31; 7.40
CVE-2018-2363	8.8	2%	Jan 9	SAP NetWeaver, SAP BASIS from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.52, contains code that allows you to execute arbitrary program code of the user's… Affected: 7.00 through 7.02; 7.10 through 7.11; 7.50 through 7.52; 7.30; 7.31; 7.40
CVE-2018-2494	8.0	1%	Dec 11	Necessary authorization checks for an authenticated user, resulting in escalation of privileges, have been fixed in SAP Basis AS ABAP of SAP NetWeaver 700 to 750, from 750 onwards… Affected: 7.00 through 7.02; 7.10 through 7.30; 7.50 through 7.53; 7.31; 7.40
CVE-2017-16682	7.2	2%	Dec 12	SAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker with administrator credentials to inject code… Affected: 7.00 through 7.02; 7.50 through 7.52; 7.30; 7.31; 7.40
CVE-2017-16691	6.5	1%	Dec 12	SAP Note Assistant tool (SAP BASIS from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31,7.40, from 7.50 to 7.52) supports upload of digitally signed note file of type 'SAR' Affected: 7.00; 7.01; 7.02; 7.10; 7.11; 7.30; +5 more