CVE-2019-0319

CVE-2019-0319 affects the SAP Gateway products listed (versions 7.5, 7.51, 7.52, 7.53). The root cause described is input content injection that can be displayed as an error message, enabling an attacker to mislead users into thinking the message is from the legitimate service. The connected docu...

CVE-2019-0338

CVE-2019-0338 affects SAP Gateway’s OData V2/V4 endpoints in SAP (versions 750–753). The HTTP headers cache-control and pragma were not properly set, allowing an attacker to access restricted information and cause Information Disclosure. The connected documents provide the affected product (SAP G...