CVE-2019-0275: SAP NetWeaver Application Server Java

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

SAML 1.1 SSO Demo Application in SAP NetWeaver Java Application Server (J2EE-APPS), versions 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40 and 7.50, does not sufficiently encode user-controlled inputs, which results in cross-site scripting (XSS) vulnerability.

Affected products

• SAP NetWeaver Application Server Java: from 7.10, up to and including 7.11; version 7.20 only; version 7.30 only; version 7.31 only; version 7.40 only; version 7.50 only

Published 2019-03-12. Last modified 2026-06-17.