CVE-2019-0367

2019-10-0819:16:25

sap

www.cve.org

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.0%

JSON

SAP NetWeaver Process Integration (B2B Toolkit), before versions 1.0 and 2.0, does not perform necessary authorization checks for an authenticated user, allowing the import of B2B table content that leads to Missing Authorization Check.

CNA Affected

[
  {
    "product": "SAP NetWeaver Process Integration (B2B Toolkit)",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< 1.0"
      },
      {
        "status": "affected",
        "version": "< 2.0"
      }
    ]
  }
]