What is CVE-2019-0393?

CVE-2019-0393 is a medium-severity vulnerability in SAP Quality Management, classified under SQL Injection. CVSS score: 4.3/10. Published 2019-11-13.

How severe is CVE-2019-0393?

Medium severity. CVSS v3 base score is 4.3 out of 10.

SQL Injection in SAP Quality Management

CVE-2019-0393

An SQL Injection vulnerability in SAP Quality Management (corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03) allows an attacker to carry out targeted database queries that can read individual fields of historical inspection results.

Vulnerability class: SQL Injection

EPSS: 0.007 (49.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Sap Quality_management — versions 1.0, 1.01, 1.02
Sap Se Quality Management (S4core) — versions < 1.0, < 1.01, < 1.02

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cna@sap.com (x_refsource_MISC, Vendor Advisory)
cna@sap.com (Permissions Required, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-0393?: CVE-2019-0393 is a medium-severity vulnerability in SAP Quality Management, classified under SQL Injection. CVSS score: 4.3/10. Published 2019-11-13.
How severe is CVE-2019-0393?: Medium severity. CVSS v3 base score is 4.3 out of 10.