CVE-2019-0311

Name: CVE-2019-0311
Creator: NVD / NIST
Published: 2019-06-12T17:29:03.56+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.80%

Last modified Jun 17, 2026

CVE-2019-0311 is a vulnerability of currently unknown severity. Automotive Dealer Portal in SAP R/3 Enterprise Application (versions: 600, 602, 603, 604, 605, 606, 616, 617) does not sufficiently encode user-controlled inputs, this makes it possible for an attacker to send unwanted scripts to the browser of the victim using unwanted input and execute malicious code there, resulting in Cross-Site Scripting (XSS) vulnerability.. EPSS estimates a 0.80% chance of exploitation in the next 30 days.

Description

Automotive Dealer Portal in SAP R/3 Enterprise Application (versions: 600, 602, 603, 604, 605, 606, 616, 617) does not sufficiently encode user-controlled inputs, this makes it possible for an attacker to send unwanted scripts to the browser of the victim using unwanted input and execute malicious code there, resulting in Cross-Site Scripting (XSS) vulnerability.

Metrics

EPSS Probability

0.80%

51.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-79

Affected Software

Vendor	Product	Versions
Sap	R\/3 Enterprise	600
Sap	R\/3 Enterprise	602
Sap	R\/3 Enterprise	603
Sap	R\/3 Enterprise	604
Sap	R\/3 Enterprise	605
Sap	R\/3 Enterprise	606
Sap	R\/3 Enterprise	616
Sap	R\/3 Enterprise	617

References

https://launchpad.support.sap.com/#/notes/2728153Permissions Required, Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242Vendor Advisory
https://launchpad.support.sap.com/#/notes/2728153Permissions Required, Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242Vendor Advisory

Timeline

Published: Jun 12, 2019
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2019-0311?

How severe is CVE-2019-0311?

Severity scoring for CVE-2019-0311 is pending analysis. The EPSS model estimates a 0.80% probability of exploitation in the next 30 days.

How do I fix CVE-2019-0311?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-0311?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST