critical9.8
CVE-2019-0304
FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EX…
Impact
FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, allows an attacker to inject code or specifically manipulated command that can be executed by the application. An attacker could thereby control the behaviour of the application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Advanced Business Application Programming Platform Kernel | Versions 7.21, 7.45, 7.49, 7.53, 7.73 |
| Sap | Advanced Business Application Programming Platform Krnl32nuc | Versions 7.21, 7.21ext, 7.22, 7.22ext |
| Sap | Advanced Business Application Programming Platform Krnl32uc | Versions 7.21, 7.21ext, 7.22, 7.22ext |
| Sap | Advanced Business Application Programming Platform Krnl64nuc | Versions 7.21, 7.21ext, 7.22, 7.22ext, 7.49 |
| Sap | Advanced Business Application Programming Platform Krnl64uc | Versions 7.21, 7.21ext, 7.22, 7.22ext, 7.49, 7.73 |