CVE-2019-0393
CVE-2019-0393
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
13 Nov 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An SQL Injection vulnerability in SAP Quality Management (corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03) allows an attacker to carry out targeted database queries that can read individual fields of historical inspection results.
Affected products
SAP SE · SAP Quality Management (S4CORE)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →