CVE-2019-0365: SAP Kernel

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.

Affected products

• SAP SAP Kernel: version 7.21 only; version 7.49 only; version 7.53 only; version 7.73 only; version 7.76 only
• SAP SAP Kernel KRNL32NUC: version 7.21 only; version 7.21ext only; version 7.22 only; version 7.22ext only
• SAP SAP Kernel KRNL32UC: version 7.21 only; version 7.21ext only; version 7.22 only; version 7.22ext only
• SAP SAP Kernel KRNL64NUC: version 7.21 only; version 7.21ext only; version 7.22 only; version 7.22ext only
• SAP SAP Kernel KRNL64UC: version 7.21 only; version 7.21ext only; version 7.22 only; version 7.22ext only; version 7.49 only; version 7.73 only

Published 2019-09-10. Last modified 2026-06-17.