SAP Advanced Business Application Programming Platform KRNL32UC vulnerabilities

3 CVEs affecting SAP Advanced Business Application Programming Platform KRNL32UC, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-0304, published 2019-06-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-0265, published 2019-02-15. Medium severity, CVSS 4.9. EPSS: 2.1% chance of exploitation in the next 30 days. SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Fixed in versions KRNL32NUC 7.21, 7.21EXT, 7.22,…
CVE-2019-0304, published 2019-06-12. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21,…
CVE-2019-0270, published 2019-03-12. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. ABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has been corrected in the…