60
CVE-2019-0327
—CVSS 3.0
7.2 high
EPSS
2%p81
Published
()
Modified
Description
SAP NetWeaver for Java Application Server - Web Container, (engineapi, versions 7.1, 7.2, 7.3, 7.31, 7.4 and 7.5), (servercode, versions 7.2, 7.3, 7.31, 7.4, 7.5), allows an attacker to upload files (including script files) without proper file format validation.
- Vendors
- sap
- Products
- netweaver application server java
- Weakness
- CWE-434
- Vector
- CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H