cve.bz

SAP Security Patch Day, January 2019: the CVEs

Filter

SAP Security Patch Day January 2019: the CVEs SAP published on 8 January 2019, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Microsoft, Adobe. Earlier: Dec 2018, Nov 2018, Oct 2018, Sep 2018, Aug 2018, Jul 2018, Jun 2018, May 2018, Apr 2018, Mar 2018, Feb 2018, Jan 2018. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 9.8CVE-2019-0247EPSS 1.3%

    SAP Cloud Connector, before version 2.11.3, allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.

  2. 9.8CVE-2019-0246EPSS 2.7%

    SAP Cloud Connector, before version 2.11.3, does not perform any authentication checks for functionalities that require user identity.