CVE-2019-0356: SAP NetWeaver Process Integration

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

Under certain conditions SAP NetWeaver Process Integration Runtime Workbench – MESSAGING and SAP_XIAF (before versions 7.31, 7.40, 7.50) allows an attacker to access information which would otherwise be restricted.

Affected products

• SAP NetWeaver Process Integration: version 7.31 only; version 7.40 only; version 7.50 only

Published 2019-09-10. Last modified 2026-06-17.