CVE-2019-0265
Estado: ModificadaMedia (4.9)—
SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Fixed in versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49,KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49. 7.73 KERNEL from 7.21 to 7.22, 7.45, 7.49, 7.53, 7.73, 7.75.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 4.9
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.05%
- Percentil entre todas las CVEs puntuadas: 81
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (5)
SAP — Advanced Business Application Programming Platform KernelSAP — Advanced Business Application Programming Platform Krnl32nucSAP — Advanced Business Application Programming Platform Krnl32ucSAP — Advanced Business Application Programming Platform Krnl64nucSAP — Advanced Business Application Programming Platform Krnl64uc
CWE
- CWE-611
Referencias
- http://www.securityfocus.com/bid/106972
- http://www.securityfocus.com/bid/107364
- https://launchpad.support.sap.com/#/notes/2729710
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943
- http://www.securityfocus.com/bid/106972
- http://www.securityfocus.com/bid/107364
- https://launchpad.support.sap.com/#/notes/2729710
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943
JSON original (NVD)
Mostrar
{
"id": "CVE-2019-0265",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
"authentication": "SINGLE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 4.9,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "HIGH",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 1.2
}
]
},
"affected": [
{
"source": "cna@sap.com",
"affectedData": [
{
"vendor": "SAP SE",
"product": "ABAP Platform (KRNL32NUC)",
"versions": [
{
"status": "affected",
"version": "< 7.21"
},
{
"status": "affected",
"version": "< 7.21EXT"
},
{
"status": "affected",
"version": "< 7.22"
},
{
"status": "affected",
"version": "< 7.22EXT"
}
]
},
{
"vendor": "SAP SE",
"product": "ABAP Platform (KRNL32UC)",
"versions": [
{
"status": "affected",
"version": "< 7.21"
},
{
"status": "affected",
"version": "< 7.21EXT"
},
{
"status": "affected",
"version": "< 7.22"
},
{
"status": "affected",
"version": "< 7.22EXT"
}
]
},
{
"vendor": "SAP SE",
"product": "ABAP Platform (KRNL64NUC)",
"versions": [
{
"status": "affected",
"version": "< 7.21"
},
{
"status": "affected",
"version": "< 7.21EXT"
},
{
"status": "affected",
"version": "< 7.22"
},
{
"status": "affected",
"version": "< 7.22EXT"
},
{
"status": "affected",
"version": "< 7.49"
}
]
},
{
"vendor": "SAP SE",
"product": "ABAP Platform (KRNL64UC)",
"versions": [
{
"status": "affected",
"version": "< 7.21"
},
{
"status": "affected",
"version": "< 7.21EXT"
},
{
"status": "affected",
"version": "< 7.22"
},
{
"status": "affected",
"version": "< 7.22EXT"
},
{
"status": "affected",
"version": "< 7.49"
},
{
"status": "affected",
"version": "< 7.73"
}
]
},
{
"vendor": "SAP SE",
"product": "ABAP Platform (KERNEL)",
"versions": [
{
"status": "affected",
"version": "< from 7.21 to 7.22"
},
{
"status": "affected",
"version": "< 7.45"
},
{
"status": "affected",
"version": "< 7.49"
},
{
"status": "affected",
"version": "< 7.53"
},
{
"status": "affected",
"version": "< 7.73"
},
{
"status": "affected",
"version": "< 7.75"
}
]
}
]
}
],
"published": "2019-02-15T18:29:01.883",
"references": [
{
"url": "http://www.securityfocus.com/bid/106972",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cna@sap.com"
},
{
"url": "http://www.securityfocus.com/bid/107364",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cna@sap.com"
},
{
"url": "https://launchpad.support.sap.com/#/notes/2729710",
"tags": [
"Permissions Required",
"Vendor Advisory"
],
"source": "cna@sap.com"
},
{
"url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943",
"tags": [
"Vendor Advisory"
],
"source": "cna@sap.com"
},
{
"url": "http://www.securityfocus.com/bid/106972",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/107364",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://launchpad.support.sap.com/#/notes/2729710",
"tags": [
"Permissions Required",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-611"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Fixed in versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49,KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49. 7.73 KERNEL from 7.21 to 7.22, 7.45, 7.49, 7.53, 7.73, 7.75."
},
{
"lang": "es",
"value": "El registro SLD de ABAP Platform permite que un atacante evite que usuarios legítimos accedan a un servicio, ya sea cerrando o inundando el mismo. Se ha solucionado en las versiones KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49,KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT y 7.49. 7.73 KERNEL desde la 7.21 hasta la 7.22, 7.45, 7.49, 7.53, 7.73 y 7.75."
}
],
"lastModified": "2026-06-17T02:08:05.840",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9691C8B-396D-418C-A890-68AE5867456D",
"versionEndIncluding": "7.22",
"versionStartIncluding": "7.21"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_kernel:7.45:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3006D7F9-6D11-48A6-899B-2C2955C1A67D"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_kernel:7.49:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2AFDC66-A5C4-4135-9A7F-1778B9DDF2EE"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_kernel:7.53:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4CB213CC-4C71-4B3A-9D9F-C83594597447"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_kernel:7.73:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46C2954E-3626-4DC7-85CA-241B9E826337"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_kernel:7.75.:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "167F9908-D675-49CA-8983-279E12B5FB11"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_krnl32nuc:7.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED21DC1E-A53A-4E92-83F0-7455EBEFA3A1"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_krnl32nuc:7.21ext:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93910493-4A5E-4E14-B6FD-6A5B175AE664"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_krnl32nuc:7.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6B9301C-C221-4345-A006-DA7B12E93D1B"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_krnl32nuc:7.22ext:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A2B2EC5-A03F-4EBB-BCAF-526DE7EFE2BD"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_krnl32uc:7.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "940B8331-6D22-418A-9D17-B14DAB035FE1"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_krnl32uc:7.21ext:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D191560-7559-4D90-A593-261C4FD6458D"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_krnl32uc:7.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01A83003-D709-4E48-8CBE-2AA40274ADA7"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_krnl32uc:7.22ext:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "471132DF-5B9A-4124-B75F-A09EA02C9CE2"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_krnl64nuc:7.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A50F5C48-173B-487A-8DD1-06A921E37602"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_krnl64nuc:7.21ext:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD2EBEA5-D698-4595-A654-DEA58C948C78"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_krnl64nuc:7.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A901C3A0-E763-4133-9F1F-CDB5AE45A6E2"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_krnl64nuc:7.22ext:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE5B551B-0CD5-4800-9A0D-B5B36AD6BCCD"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_krnl64nuc:7.49:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4ED75DB6-7FF6-43CD-9801-7C8410042833"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_krnl64uc:7.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9CC9A5B1-F1B2-4804-BABD-2CAEA06BCC42"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_krnl64uc:7.21ext:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5D40A13-C630-4E43-A44B-76CAB09FF2C1"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_krnl64uc:7.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26486715-DC64-4AC6-A60D-01254A75C19C"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_krnl64uc:7.22ext:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6953A3D-8BD4-45DA-A872-6222CB6C1B77"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_krnl64uc:7.49:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C3A6702-3A41-4DA5-B705-AAC77A097AC0"
},
{
"criteria": "cpe:2.3:a:sap:advanced_business_application_programming_platform_krnl64uc:7.73:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80296DDD-A3B9-4A7F-B831-DC064A85CE38"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cna@sap.com"
}