CVE-2019-0340

The XML parser, which is being used by SAP Enable Now, before version 1902, has not been hardened correctly, leading to Missing XML Validation vulnerability

published August 14, 2019

CVSS
—
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

The XML parser, which is being used by SAP Enable Now, before version 1902, has not been hardened correctly, leading to Missing XML Validation vulnerability. This issue affects the file upload at multiple locations. An attacker can read local XXE files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00689 · 52.2th percentile
Published
2019-08-14T13:51Z
EPSS history
Timeline
  • 14 AUG 13:51Z
    The XML parser, which is being used by SAP Enable Now, before version 1902, has not been hardened correctly, leading to Missing XML Validation vulnerability
    cvelistv5