CVE-2019-0270

ABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has been corrected in the following versions: KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.74, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, 7.74, 8.04, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, 7.74, 7.75, 8.04.

• CWE-862

• http://www.securityfocus.com/bid/107377Third Party Advisory
• https://launchpad.support.sap.com/#/notes/2727689Permissions Required, Vendor Advisory
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=515408080Vendor Advisory
• http://www.securityfocus.com/bid/107377Third Party Advisory
• https://launchpad.support.sap.com/#/notes/2727689Permissions Required, Vendor Advisory
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=515408080Vendor Advisory

Published

Mar 12, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-0262SAP WebIntelligence BILaunchPad, versions 4.10, 4.20, does n…
• CVE-2019-0265SLD Registration of ABAP Platform allows an attacker to prev…
• CVE-2019-0266Under certain conditions SAP HANA Extended Application Servi…
• CVE-2019-0267SAP Manufacturing Integration and Intelligence, versions 15.…
• CVE-2019-0268SAP BusinessObjects Business Intelligence Platform (CMC Modu…
• CVE-2019-0269SAP BusinessObjects Business Intelligence Platform (BI Works…
• CVE-2019-0271ABAP Server (used in NetWeaver and Suite/ERP) and ABAP Platf…6.5
• CVE-2019-0274SAP Mobile Platform SDK allows an attacker to prevent legiti…
• CVE-2019-0275SAML 1.1 SSO Demo Application in SAP NetWeaver Java Applicat…5.4
• CVE-2019-0276Banking services from SAP 9.0 (FSAPPL version 5) and SAP S/4…
• CVE-2019-0277SAP HANA extended application services, version 1, advanced …
• CVE-2019-0278Under certain conditions the Monitoring Servlet of the SAP N…