# Vulnerabilities published in 2019


- [CVE-2019-0599](https://insights.sbomify.com/CVE-2019-0599/): Memory corruption in Windows (high 7.8)
- [CVE-2019-0598](https://insights.sbomify.com/CVE-2019-0598/): Memory corruption in Windows (high 7.8)
- [CVE-2019-0597](https://insights.sbomify.com/CVE-2019-0597/): Memory corruption in Windows (high 7.8)
- [CVE-2019-0596](https://insights.sbomify.com/CVE-2019-0596/): Memory corruption in Windows (high 7.8)
- [CVE-2019-0595](https://insights.sbomify.com/CVE-2019-0595/): Memory corruption in Windows (high 7.8)
- [CVE-2019-0594](https://insights.sbomify.com/CVE-2019-0594/): Code injection in Microsoft SharePoint Enterprise Server (high 8.8)
- [CVE-2019-0593](https://insights.sbomify.com/CVE-2019-0593/): Memory corruption in ChakraCore (high 7.5)
- [CVE-2019-0592](https://insights.sbomify.com/CVE-2019-0592/): High severity vulnerability that affects Microsoft.ChakraCore (high 7.5)
- [CVE-2019-0591](https://insights.sbomify.com/CVE-2019-0591/): Memory corruption in ChakraCore (high 7.5)
- [CVE-2019-0590](https://insights.sbomify.com/CVE-2019-0590/): Memory corruption in ChakraCore (high 7.5)
- [CVE-2019-0588](https://insights.sbomify.com/CVE-2019-0588/): Information disclosure in Microsoft Exchange Server (medium 6.5)
- [CVE-2019-0586](https://insights.sbomify.com/CVE-2019-0586/): Memory corruption in Microsoft Exchange Server (critical 9.8)
- [CVE-2019-0585](https://insights.sbomify.com/CVE-2019-0585/): Memory corruption in Microsoft Office (high 8.8)
- [CVE-2019-0584](https://insights.sbomify.com/CVE-2019-0584/): Memory corruption in Windows 10 (high 7.8)
- [CVE-2019-0583](https://insights.sbomify.com/CVE-2019-0583/): Memory corruption in Windows 10 (high 7.8)
- [CVE-2019-0582](https://insights.sbomify.com/CVE-2019-0582/): Memory corruption in Windows 10 (high 7.8)
- [CVE-2019-0581](https://insights.sbomify.com/CVE-2019-0581/): Memory corruption in Windows 10 (high 7.8)
- [CVE-2019-0580](https://insights.sbomify.com/CVE-2019-0580/): Memory corruption in Windows 10 (high 7.8)
- [CVE-2019-0579](https://insights.sbomify.com/CVE-2019-0579/): Memory corruption in Windows 10 (high 7.8)
- [CVE-2019-0578](https://insights.sbomify.com/CVE-2019-0578/): Memory corruption in microsoft:windows 10 (high 7.8)
- [CVE-2019-0577](https://insights.sbomify.com/CVE-2019-0577/): Memory corruption in Windows 10 (high 7.8)
- [CVE-2019-0576](https://insights.sbomify.com/CVE-2019-0576/): Memory corruption in Windows 10 (high 7.8)
- [CVE-2019-0575](https://insights.sbomify.com/CVE-2019-0575/): Memory corruption in Windows 10 (high 7.8)
- [CVE-2019-0574](https://insights.sbomify.com/CVE-2019-0574/): Privilege escalation in Windows 10 (high 7.8)
- [CVE-2019-0573](https://insights.sbomify.com/CVE-2019-0573/): Privilege escalation in Windows 10 (high 7.8)
- [CVE-2019-0572](https://insights.sbomify.com/CVE-2019-0572/): Privilege escalation in Windows 10 (high 7.8)
- [CVE-2019-0571](https://insights.sbomify.com/CVE-2019-0571/): Privilege escalation in Windows 10 (high 7.8)
- [CVE-2019-0570](https://insights.sbomify.com/CVE-2019-0570/): Use after free in Windows 10 (high 7.8)
- [CVE-2019-0569](https://insights.sbomify.com/CVE-2019-0569/): Information disclosure in Windows 10 (medium 5.5)
- [CVE-2019-0568](https://insights.sbomify.com/CVE-2019-0568/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2019-0567](https://insights.sbomify.com/CVE-2019-0567/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2019-0566](https://insights.sbomify.com/CVE-2019-0566/): Privilege escalation in Microsoft Edge (high 8.8)
- [CVE-2019-0565](https://insights.sbomify.com/CVE-2019-0565/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2019-0564](https://insights.sbomify.com/CVE-2019-0564/): Denial of service in ASP.NET Core (high 7.5)
- [CVE-2019-0562](https://insights.sbomify.com/CVE-2019-0562/): Privilege escalation in Microsoft SharePoint (medium 5.4)
- [CVE-2019-0561](https://insights.sbomify.com/CVE-2019-0561/): Information disclosure in Microsoft Office (medium 5.5)
- [CVE-2019-0560](https://insights.sbomify.com/CVE-2019-0560/): Information disclosure in Microsoft Office (medium 5.5)
- [CVE-2019-0559](https://insights.sbomify.com/CVE-2019-0559/): Information disclosure in Microsoft Office (medium 6.5)
- [CVE-2019-0558](https://insights.sbomify.com/CVE-2019-0558/): Cross-site scripting in Microsoft Business Productivity Servers (medium 5.4)
- [CVE-2019-0557](https://insights.sbomify.com/CVE-2019-0557/): Cross-site scripting in Microsoft SharePoint (medium 5.4)
- [CVE-2019-0556](https://insights.sbomify.com/CVE-2019-0556/): Cross-site scripting in Microsoft SharePoint (medium 5.4)
- [CVE-2019-0555](https://insights.sbomify.com/CVE-2019-0555/): Privilege escalation in microsoft:windows 10 (high 7.8)
- [CVE-2019-0554](https://insights.sbomify.com/CVE-2019-0554/): Information disclosure in Windows 10 (medium 5.5)
- [CVE-2019-0553](https://insights.sbomify.com/CVE-2019-0553/): Information disclosure in Windows 10 (medium 5.5)
- [CVE-2019-0552](https://insights.sbomify.com/CVE-2019-0552/): Privilege escalation in Windows 10 (high 8.8)
- [CVE-2019-0551](https://insights.sbomify.com/CVE-2019-0551/): Code injection in Windows 10 (high 8.4)
- [CVE-2019-0550](https://insights.sbomify.com/CVE-2019-0550/): Code injection in Windows 10 (high 8.4)
- [CVE-2019-0549](https://insights.sbomify.com/CVE-2019-0549/): Information disclosure in Windows 10 (medium 5.5)
- [CVE-2019-0548](https://insights.sbomify.com/CVE-2019-0548/): Denial of service in ASP.NET Core (high 7.5)
- [CVE-2019-0547](https://insights.sbomify.com/CVE-2019-0547/): Memory corruption in Windows 10 (critical 9.8)
- [CVE-2019-0546](https://insights.sbomify.com/CVE-2019-0546/): Memory corruption in Microsoft Visual Studio (high 7.8)
- [CVE-2019-0545](https://insights.sbomify.com/CVE-2019-0545/): Exposure of Sensitive Information in System.Net.Http (high 7.5)
- [CVE-2019-0543](https://insights.sbomify.com/CVE-2019-0543/): Microsoft Windows Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-0542](https://insights.sbomify.com/CVE-2019-0542/): xterm vulnerable to remote code execution (high 8.8)
- [CVE-2019-0541](https://insights.sbomify.com/CVE-2019-0541/): Microsoft MSHTML Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2019-0540](https://insights.sbomify.com/CVE-2019-0540/): Security feature bypass in Microsoft Excel Viewer (medium 5.5)
- [CVE-2019-0539](https://insights.sbomify.com/CVE-2019-0539/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2019-0538](https://insights.sbomify.com/CVE-2019-0538/): Memory corruption in microsoft:office (high 7.8)
- [CVE-2019-0537](https://insights.sbomify.com/CVE-2019-0537/): Information disclosure in Microsoft Visual Studio (medium 5.5)
- [CVE-2019-0536](https://insights.sbomify.com/CVE-2019-0536/): Information disclosure in Windows 10 (medium 5.5)
- [CVE-2019-0405](https://insights.sbomify.com/CVE-2019-0405/): Information disclosure in SAP Enable Now (high 7.5)
- [CVE-2019-0404](https://insights.sbomify.com/CVE-2019-0404/): Information disclosure in SAP Enable Now (high 7.5)
- [CVE-2019-0403](https://insights.sbomify.com/CVE-2019-0403/): Code injection in SAP Enable Now (critical 9.8)
- [CVE-2019-0402](https://insights.sbomify.com/CVE-2019-0402/): Information disclosure in SAP Adaptive Server Enterprise (medium 4.4)
- [CVE-2019-0399](https://insights.sbomify.com/CVE-2019-0399/): Information disclosure in SAP Portfolio and Project Management (CPRXRPM) (medium 6.5)
- [CVE-2019-0398](https://insights.sbomify.com/CVE-2019-0398/): Cross-site request forgery in SAP BusinessObjects Business Intelligence Platform (Monitoring Application) (high 8.8)
- [CVE-2019-0396](https://insights.sbomify.com/CVE-2019-0396/): XML external entity in SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) (high 7.1)
- [CVE-2019-0395](https://insights.sbomify.com/CVE-2019-0395/): Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (Fiori BI Launchpad) (medium 5.4)
- [CVE-2019-0393](https://insights.sbomify.com/CVE-2019-0393/): SQL injection in SAP Quality Management (S4CORE) (medium 4.3)
- [CVE-2019-0391](https://insights.sbomify.com/CVE-2019-0391/): Information disclosure in SAP NetWeaver AS Java (medium 4.3)
- [CVE-2019-0390](https://insights.sbomify.com/CVE-2019-0390/): Information disclosure in SAP Data Hub (DH Foundation) (medium 4.3)
- [CVE-2019-0389](https://insights.sbomify.com/CVE-2019-0389/): Privilege escalation in SAP NetWeaver Application Server Java (J2EE-Framework) (high 8.8)
- [CVE-2019-0388](https://insights.sbomify.com/CVE-2019-0388/): Other in SAP UI (medium 5.3)
- [CVE-2019-0386](https://insights.sbomify.com/CVE-2019-0386/): Missing authorization in S4HANA Sales (S4CORE) (medium 6.3)
- [CVE-2019-0385](https://insights.sbomify.com/CVE-2019-0385/): Cross-site scripting in SAP Enable Now (medium 6.5)
- [CVE-2019-0384](https://insights.sbomify.com/CVE-2019-0384/): Missing authorization in SAP Treasury and Risk Management (EA-FINSERV) (high 8.8)
- [CVE-2019-0383](https://insights.sbomify.com/CVE-2019-0383/): Missing authorization in SAP Treasury and Risk Management (EA-FINSERV) (high 8.8)
- [CVE-2019-0382](https://insights.sbomify.com/CVE-2019-0382/): Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) (medium 5.4)
- [CVE-2019-0381](https://insights.sbomify.com/CVE-2019-0381/): Other in SAP Dynamic Tiering (medium 5.5)
- [CVE-2019-0380](https://insights.sbomify.com/CVE-2019-0380/): Information disclosure in SAP Landscape Management enterprise edition (medium 4.9)
- [CVE-2019-0379](https://insights.sbomify.com/CVE-2019-0379/): Auth bypass in SAP Process Integration, business-to-business add-on (medium 5.3)
- [CVE-2019-0378](https://insights.sbomify.com/CVE-2019-0378/): Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) (medium 5.4)
- [CVE-2019-0377](https://insights.sbomify.com/CVE-2019-0377/): Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) (medium 5.4)
- [CVE-2019-0376](https://insights.sbomify.com/CVE-2019-0376/): Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) (medium 5.4)
- [CVE-2019-0375](https://insights.sbomify.com/CVE-2019-0375/): Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) (medium 5.4)
- [CVE-2019-0374](https://insights.sbomify.com/CVE-2019-0374/): Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) (medium 5.4)
- [CVE-2019-0370](https://insights.sbomify.com/CVE-2019-0370/): Code injection in SAP Financial Consolidation (medium 6.5)
- [CVE-2019-0369](https://insights.sbomify.com/CVE-2019-0369/): Cross-site scripting in SAP Financial Consolidation (medium 5.4)
- [CVE-2019-0368](https://insights.sbomify.com/CVE-2019-0368/): Cross-site scripting in SAP Customer Relationship Management (Email Management - BBPCRM) (medium 5.4)
- [CVE-2019-0367](https://insights.sbomify.com/CVE-2019-0367/): Missing authorization in SAP NetWeaver Process Integration (B2B Toolkit) (medium 4.3)
- [CVE-2019-0365](https://insights.sbomify.com/CVE-2019-0365/): Denial of service in SAP GUI for Java (BC-FES-JAV) (high 7.5)
- [CVE-2019-0364](https://insights.sbomify.com/CVE-2019-0364/): Server-side request forgery in SAP HANA Extended Application Services (medium 4.3)
- [CVE-2019-0363](https://insights.sbomify.com/CVE-2019-0363/): Server-side request forgery in SAP HANA Extended Application Services (high 7.1)
- [CVE-2019-0361](https://insights.sbomify.com/CVE-2019-0361/): Cross-site scripting in SAP Supplier Relationship Management (Master Data Management Catalog) (SRM MDM CAT) (medium 6.1)
- [CVE-2019-0357](https://insights.sbomify.com/CVE-2019-0357/): Privilege escalation in SAP HANA (medium 6.7)
- [CVE-2019-0356](https://insights.sbomify.com/CVE-2019-0356/): Information disclosure in SAP NetWeaver Process Integration Runtime Workbench – MESSAGING and SAP XIAF (medium 4.3)
- [CVE-2019-0355](https://insights.sbomify.com/CVE-2019-0355/): Code injection in SAP NetWeaver AS for Java (Web Container)-ENGINEAPI (high 7.2)
- [CVE-2019-0353](https://insights.sbomify.com/CVE-2019-0353/): Information disclosure in SAP Business One Client (low 3.3)
- [CVE-2019-0352](https://insights.sbomify.com/CVE-2019-0352/): Information disclosure in SAP BusinessObjects Business Intelligence Platform (CMC) (high 7.5)
- [CVE-2019-0351](https://insights.sbomify.com/CVE-2019-0351/): Code injection in SAP NetWeaver UDDI Server (Services Registry) (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/160/