CVE-2019-0390

MEDIUM 4.3CVE-2019-0390 · Published 13/11/2019 · updated 17/06/2026

In short

CVE-2019-0390 is a MEDIUM (CVSS 4.3) vulnerability affecting diagnostics agent (sap).
Chance of exploitation in the next 30 days (EPSS): 0.70%, higher than 53.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
diagnostics agent sap	`= 7.2`	No fix yet

Description

Under certain conditions SAP Data Hub (corrected in DH_Foundation version 2) allows an attacker to access information which would otherwise be restricted. Connection details that are maintained in Connection Manager are visible to users.

References

launchpad.support.sap.com · Permissions Required
wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

More vulnerabilities in diagnostics agent

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free