Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 161 of 164.
- CVE-2019-0350 Denial of service in SAP HANA Database
- CVE-2019-0349 Missing authorization in SAP Kernel (KERNEL)
- CVE-2019-0348 Weak cryptography in SAP Business Objects Business Intelligence Platform (Web Intelligence)
- CVE-2019-0346 Information disclosure in SAP Business Objects Business Intelligence Platform (CMC)
- CVE-2019-0345 Server-side request forgery in SAP NetWeaver Application Server for Java (Administrator System Overview)
- CVE-2019-0344 SAP Commerce Cloud Deserialization of Untrusted Data
- CVE-2019-0343 Code injection in SAP Commerce Cloud (Mediaconversion Extension)
- CVE-2019-0341 Misconfiguration in SAP Enable Now
- CVE-2019-0340 XML external entity in SAP Enable Now
- CVE-2019-0338 Information disclosure in SAP Gateway
- CVE-2019-0337 Cross-site scripting in SAP NetWeaver Process Integration (Java Proxy Runtime)
- CVE-2019-0335 Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (CMC)
- CVE-2019-0334 Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (BI Workspace)
- CVE-2019-0333 Information disclosure in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)
- CVE-2019-0332 Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (Info View)
- CVE-2019-0331 Information disclosure in SAP BusinessObjects Business Intelligence Platform (BI Workspace)
- CVE-2019-0330 Code injection in SAP Diagnostic Agent (LM-Service)
- CVE-2019-0329 Cross-site scripting in SAP Information Steward
- CVE-2019-0328 Command injection in SAP NetWeaver Process Integration ABAP tests (SAP Basis)
- CVE-2019-0327 File upload in SAP NetWeaver for Java Application Server - Web Container (engineapi)
- CVE-2019-0326 Cross-site scripting in SAP BusinessObjects Business Intelligence Platform - BI Workspace (Enterprise)
- CVE-2019-0325 Missing authorization in SAP ERP HCM (SAP HRCES)
- CVE-2019-0322 Denial of service in SAP Commerce Cloud (ex SAP Hybris Commerce) (HY COM)
- CVE-2019-0321 Cross-site scripting in ABAP Server and ABAP Platform (SAP Basis)
- CVE-2019-0319 Other in SAP Gateway
- CVE-2019-0318 Information disclosure in SAP NetWeaver Application Server for Java (Startup Framework)
- CVE-2019-0316 Cross-site scripting in SAP NetWeaver Process Integration(SAP XIESR)
- CVE-2019-0315 Information disclosure in SAP NetWeaver Process Integration(SAP XIESR)
- CVE-2019-0314 Denial of service in SAP Inventory Manager
- CVE-2019-0312 Missing authorization in SAP NetWeaver Process Integration(SAP XIESR)
- CVE-2019-0311 Cross-site scripting in SAP R/3 Enterprise Application
- CVE-2019-0308 Cross-site scripting in SAP E-Commerce (Business-to-Consumer application)
- CVE-2019-0307 Information disclosure in SAP Solution Manager(Diagnostics Agent)
- CVE-2019-0306 Information disclosure in SAP HANA Extended Application Services (advanced model)
- CVE-2019-0305 Other in SAP NetWeaver Process Integration(SAP XIESR and SAP XITOOL)
- CVE-2019-0304 Code injection in SAP NetWeaver AS ABAP Platform(KERNEL)
- CVE-2019-0303 Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (Administration Console)
- CVE-2019-0301 Privilege escalation in SAP Identity Management (REST Interface)
- CVE-2019-0298 Cross-site scripting in SAP E-Commerce (SAP-CRMJAV, SAP-CRMWEB, SAP-SHRWEB, SAP-SHRJAV, SAP-CRMAPP, SAP-SHRAPP)
- CVE-2019-0293 Missing authorization in SAP Solution Manager system (ST-PI)
- CVE-2019-0291 Information disclosure in SAP Solution Manager
- CVE-2019-0289 Information disclosure in SAP BusinessObjects Business Intelligence platform
- CVE-2019-0287 Information disclosure in SAP BusinessObjects Business Intelligence platform (Central Management Server)
- CVE-2019-0285 Information disclosure in SAP Crystal Reports for Visual Studio
- CVE-2019-0284 XML external entity in SAP HANA
- CVE-2019-0283 Security feature bypass in SAP NetWeaver Process Integration (Adapter Engine)
- CVE-2019-0282 Auth bypass in SAP NetWeaver Process Integration (Runtime Workbench)
- CVE-2019-0281 Cross-site scripting in OpenUI5
- CVE-2019-0280 Missing authorization in SAP Enterprise Financial Services (S4CORE)
- CVE-2019-0279 Missing authorization in SAP BASIS
- CVE-2019-0278 Information disclosure in SAP NetWeaver Process Integration (Messaging System)
- CVE-2019-0277 XML external entity in SAP HANA Extended Application Services
- CVE-2019-0276 Missing authorization in Banking services from SAP 9.0 (FSAPPL)
- CVE-2019-0275 Cross-site scripting in SAP NetWeaver Java Application Server (J2EE-APPS)
- CVE-2019-0274 Denial of service in SAP Mobile Platform SDK
- CVE-2019-0271 XML external entity in ABAP Server
- CVE-2019-0270 Missing authorization in ABAP Platform & Server (KERNEL)
- CVE-2019-0269 Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (BI Workspace)
- CVE-2019-0268 XML external entity in SAP BusinessObjects Business Intelligence Platform (CMC Module)
- CVE-2019-0267 Cross-site request forgery in SAP Manufacturing Integration and Intelligence
- CVE-2019-0266 Information disclosure in SAP HANA Extended Application Services, advanced model (XS advanced)
- CVE-2019-0265 Denial of service in ABAP Platform (KERNEL)
- CVE-2019-0262 Cross-site scripting in SAP WebIntelligence BILaunchPad (Enterprise)
- CVE-2019-0261 Auth bypass in SAP HANA Extended Application Services
- CVE-2019-0259 File upload in SAP BusinessObjects Business Intelligence Platform Servers (Enterprise)
- CVE-2019-0258 Missing authorization in SAP Disclosure Management
- CVE-2019-0257 Missing authorization in ABAP Platform(SAP Basis)
- CVE-2019-0256 Information disclosure in SAP Business One Mobile Android App
- CVE-2019-0255 Privilege escalation in sap:advanced business application programming platform kernel
- CVE-2019-0254 Cross-site scripting in SAP Disclosure Management
- CVE-2019-0251 Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (Fiori Launchpad)
- CVE-2019-0249 Information disclosure in SAP Landscape Management(VCM)
- CVE-2019-0248 Information disclosure in SAP Gateway of ABAP Application Server(SAP BASIS)
- CVE-2019-0247 Code injection in SAP Cloud Connector
- CVE-2019-0246 Missing authorization in SAP Cloud Connector
- CVE-2019-0245 Cross-site scripting in SAP CRM WebClient UI (S4FND)
- CVE-2019-0244 Cross-site scripting in SAP CRM WebClient UI (S4FND)
- CVE-2019-0243 Missing authorization in SAP BW/4HANA (DW4CORE)
- CVE-2019-0241 Denial of service in SAP Work and Inventory Manager (Agentry SDK)
- CVE-2019-0240 Denial of service in SAP Business Objects Mobile for Android
- CVE-2019-0238 Cross-site scripting in SAP Commerce (ex. SAP Hybris Commerce)
- CVE-2019-0235 Cross-site request forgery in Apache OFBiz
- CVE-2019-0234 Cross-site scripting in Apache Roller
- CVE-2019-0233 Improper Preservation of Permissions in Apache Struts
- CVE-2019-0232 Apache Tomcat OS Command Injection vulnerability
- CVE-2019-0231 Apache MINA SSLFilter security Issue
- CVE-2019-0230 Improperly Controlled Modification of Dynamically-Determined Object Attributes in Apache Struts
- CVE-2019-0229 Apache Airflow vulnerable to CSRF Attacks
- CVE-2019-0228 Vulnerability that affects org.apache.pdfbox:pdfbox
- CVE-2019-0227 Server Side Request Forgery in Apache Axis
- CVE-2019-0226 Apache Karaf vulnerable to relative path traversal
- CVE-2019-0225 Improper Limitation of a Pathname ('Path Traversal') in org.apache.jspwiki:jspwiki-war
- CVE-2019-0224 Moderate severity vulnerability that affects org.apache.jspwiki:jspwiki-main
- CVE-2019-0223 Security feature bypass in Apache Qpid Proton
- CVE-2019-0222 Improper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-client
- CVE-2019-0221 Cross-site scripting in Apache Tomcat
- CVE-2019-0220 Security feature bypass in Apache HTTP Server
- CVE-2019-0219 Privilege Escalation in cordova-plugin-inappbrowser
- CVE-2019-0218 Cross-site scripting in Apache Pony Mail (incubating)
- CVE-2019-0217 Race condition in Apache HTTP Server