mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
120 lines
4.9 KiB
JSON
120 lines
4.9 KiB
JSON
{
|
|
"data_type": "CVE",
|
|
"data_format": "MITRE",
|
|
"data_version": "4.0",
|
|
"CVE_data_meta": {
|
|
"ID": "CVE-2019-0327",
|
|
"ASSIGNER": "cna@sap.com",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"vendor_name": "SAP SE",
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "SAP NetWeaver for Java Application Server - Web Container (engineapi) ",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_name": "<",
|
|
"version_value": "7.1"
|
|
},
|
|
{
|
|
"version_name": "<",
|
|
"version_value": "7.2"
|
|
},
|
|
{
|
|
"version_name": "<",
|
|
"version_value": "7.3"
|
|
},
|
|
{
|
|
"version_name": "<",
|
|
"version_value": "7.31"
|
|
},
|
|
{
|
|
"version_name": "<",
|
|
"version_value": "7.4"
|
|
},
|
|
{
|
|
"version_name": "<",
|
|
"version_value": "7.5"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"product_name": "SAP NetWeaver for Java Application Server - Web Container (servercode)",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_name": "<",
|
|
"version_value": "7.2"
|
|
},
|
|
{
|
|
"version_name": "<",
|
|
"version_value": "7.3"
|
|
},
|
|
{
|
|
"version_name": "<",
|
|
"version_value": "7.31"
|
|
},
|
|
{
|
|
"version_name": "<",
|
|
"version_value": "7.4"
|
|
},
|
|
{
|
|
"version_name": "<",
|
|
"version_value": "7.5"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "SAP NetWeaver for Java Application Server - Web Container, (engineapi, versions 7.1, 7.2, 7.3, 7.31, 7.4 and 7.5), (servercode, versions 7.2, 7.3, 7.31, 7.4, 7.5), allows an attacker to upload files (including script files) without proper file format validation."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Unrestricted File Upload"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"refsource": "BID",
|
|
"name": "109071",
|
|
"url": "http://www.securityfocus.com/bid/109071"
|
|
},
|
|
{
|
|
"url": "https://launchpad.support.sap.com/#/notes/2777910",
|
|
"refsource": "MISC",
|
|
"name": "https://launchpad.support.sap.com/#/notes/2777910"
|
|
},
|
|
{
|
|
"refsource": "CONFIRM",
|
|
"name": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575",
|
|
"url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575"
|
|
}
|
|
]
|
|
}
|
|
} |