Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-0365

SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.

Published

2019-09-10T17:15:11.330

Last Modified

2024-11-21T04:16:44.830

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

6.9

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sap sap_kernel 7.21 Yes
Application sap sap_kernel 7.49 Yes
Application sap sap_kernel 7.53 Yes
Application sap sap_kernel 7.73 Yes
Application sap sap_kernel 7.76 Yes
Application sap sap_kernel_krnl32nuc 7.21 Yes
Application sap sap_kernel_krnl32nuc 7.21ext Yes
Application sap sap_kernel_krnl32nuc 7.22 Yes
Application sap sap_kernel_krnl32nuc 7.22ext Yes
Application sap sap_kernel_krnl32uc 7.21 Yes
Application sap sap_kernel_krnl32uc 7.21ext Yes
Application sap sap_kernel_krnl32uc 7.22 Yes
Application sap sap_kernel_krnl32uc 7.22ext Yes
Application sap sap_kernel_krnl64nuc 7.21 Yes
Application sap sap_kernel_krnl64nuc 7.21ext Yes
Application sap sap_kernel_krnl64nuc 7.22 Yes
Application sap sap_kernel_krnl64nuc 7.22ext Yes
Application sap sap_kernel_krnl64uc 7.21 Yes
Application sap sap_kernel_krnl64uc 7.21ext Yes
Application sap sap_kernel_krnl64uc 7.22 Yes
Application sap sap_kernel_krnl64uc 7.22ext Yes
Application sap sap_kernel_krnl64uc 7.49 Yes
Application sap sap_kernel_krnl64uc 7.73 Yes
References