SAP Advanced Business Application Programming Platform Kernel vulnerabilities

5 CVEs affecting SAP Advanced Business Application Programming Platform Kernel, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-0349, published 2019-08-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-0265, published 2019-02-15. Medium severity, CVSS 4.9. EPSS: 2.1% chance of exploitation in the next 30 days. SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Fixed in versions KRNL32NUC 7.21, 7.21EXT, 7.22,…
CVE-2019-0255, published 2019-02-15. High severity, CVSS 8.1. EPSS: 1.7% chance of exploitation in the next 30 days. SAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75, fails to validate type of installation for an ABAP Server system correctly. That behavior may lead to…
CVE-2019-0304, published 2019-06-12. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21,…
CVE-2019-0270, published 2019-03-12. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. ABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has been corrected in the…
CVE-2019-0349, published 2019-08-14. High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days. SAP Kernel (ABAP Debugger), versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22,…