CVE-2019-0338: SAP Gateway

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

During an OData V2/V4 request in SAP Gateway, versions 750, 751, 752, 753, the HTTP Header attributes cache-control and pragma were not properly set, allowing an attacker to access restricted information, resulting in Information Disclosure.

Affected products

• SAP Gateway: version 750 only; version 751 only; version 752 only; version 753 only

Published 2019-08-14. Last modified 2026-06-17.