CVE-2019-0254

MEDIUM 5.4CVE-2019-0254 · Published 15/02/2019 · updated 17/06/2026

In short

CVE-2019-0254 is a MEDIUM (CVSS 5.4) vulnerability affecting disclosure management (sap).
Chance of exploitation in the next 30 days (EPSS): 0.89%, higher than 59.3% of all vulnerabilities.
Fix: update to 10.1 or later.

Package	Affected versions	Patched versions
disclosure management sap	`< 10.1`	`10.1`

Description

SAP Disclosure Management (before version 10.1 Stack 1301) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

References

securityfocus.com/bid/107004 · Third Party Advisory
launchpad.support.sap.com · Permissions Required
wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

More vulnerabilities in disclosure management

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

disclosure management

sap

< 10.1

10.1

More vulnerabilities in disclosure management

See all →