CVE-2019-0305
CVE-2019-0305
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
12 jun 2019Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Java Server Pages (JSPs) provided by the SAP NetWeaver Process Integration (SAP_XIESR and SAP_XITOOL: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50) do not restrict or incorrectly restrict frame objects or UI layers that belong to another application or domain, resulting in Clickjacking vulnerability. Successful exploitation of this vulnerability leads to unwanted modification of user's data.
Productos afectados
SAP SE · SAP NetWeaver Process Integration(SAP_XIESR and SAP_XITOOL)¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →