CVE-2019-0283

SAP NetWeaver Process Integration (Adapter Engine), fixed in versions 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; is vulnerable to Digital Signature Spoofing. It is possible to spoof XML signatures and send arbitrary requests to the server via PI Axis adapter. These requests will be accepted by the PI Axis adapter even if the payload has been altered, especially when the signed element is the body of the xml document.

• CWE-290

• https://launchpad.support.sap.com/#/notes/2747683Permissions Required, Vendor Advisory
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114Vendor Advisory
• https://launchpad.support.sap.com/#/notes/2747683Permissions Required, Vendor Advisory
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114Vendor Advisory

Published

Apr 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-0277SAP HANA extended application services, version 1, advanced …
• CVE-2019-0278Under certain conditions the Monitoring Servlet of the SAP N…
• CVE-2019-0279ABAP BASIS function modules INST_CREATE_R3_RFC_DEST, INST_CR…
• CVE-2019-0280SAP Treasury and Risk Management (EA-FINSERV 6.0, 6.03, 6.04…
• CVE-2019-0281SAPUI5 and OpenUI5, before versions 1.38.39, 1.44.39, 1.52.2…
• CVE-2019-0282Several web pages in SAP NetWeaver Process Integration (Runt…
• CVE-2019-0284SLD Registration in SAP HANA (fixed in versions 1.0, 2.0) do…
• CVE-2019-0285The .NET SDK WebForm Viewer in SAP Crystal Reports for Visua…
• CVE-2019-0287Under certain conditions SAP BusinessObjects Business Intell…
• CVE-2019-0289Under certain conditions SAP BusinessObjects Business Intell…
• CVE-2019-0291Under certain conditions Solution Manager, version 7.2, allo…
• CVE-2019-0293Read of RFC destination does not always perform necessary au…