CVE-2019-0267

2019-02-1518:00:00

sap

www.cve.org

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.2%

JSON

SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, (Illuminator Servlet) currently does not provide Anti-XSRF tokens. This might lead to XSRF attacks in case the data is being posted to the Servlet from an external application.

CNA Affected

[
  {
    "product": "SAP Manufacturing Integration and Intelligence",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< 15.0"
      },
      {
        "status": "affected",
        "version": "< 15.1"
      },
      {
        "status": "affected",
        "version": "< 15.2"
      }
    ]
  }
]