CVE-2019-0340
CVE-2019-0340
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
14 Aug 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The XML parser, which is being used by SAP Enable Now, before version 1902, has not been hardened correctly, leading to Missing XML Validation vulnerability. This issue affects the file upload at multiple locations. An attacker can read local XXE files.
Affected products
SAP SE · SAP Enable NowWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →