Under certain conditions the PI Integration Builder Web UI of SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20,…

Description

Under certain conditions the PI Integration Builder Web UI of SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50 and SAP_XIPCK 7.10 to 7.11, 7.20, 7.30) allows an attacker to access passwords used in FTP channels leading to information disclosure.

Scores

EPSS (exploitation in 30 days)

1.4% · top 27% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

• Information Disclosure

Affected products

• SAP SE · SAP NetWeaver Process Integration(SAP_XIESR)

  • affected < 7.10 to 7.11
  • affected < 7.20
  • affected < 7.30
  • affected < 7.31
  • affected < 7.40
  • affected < 7.50

• SAP SE · SAP NetWeaver Process Integration(SAP_XITOOL)

  • affected < 7.10 to 7.11
  • affected < 7.30
  • affected < 7.31
  • affected < 7.40
  • affected < 7.50

• SAP SE · SAP NetWeaver Process Integration(SAP_XIPCK)

  • affected < 7.10 to 7.11
  • affected < 7.20
  • affected < 7.30

References (2)

• https://launchpad.support.sap.com/#/notes/2755438 (opens in a new tab)x_refsource_MISCx_transferred
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242 (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2019-0315](https://trackcve.app/badge/CVE-2019-0315.svg)](https://trackcve.app/cve/CVE-2019-0315)

Record last updated 4 Aug 2024, 17:44 UTC.