CoreCVE
Back

MEDIUM

Java Server Pages (JSPs) provided by the SAP NetWeaver Process Integration (SAP_XIESR and SAP_XITOOL: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50) do not restrict or incorrectly restrict frame objects or UI layers that belong to another application or domain, resulting in Clickjacking vulnerability

Published Jun 12, 2019

Description

Java Server Pages (JSPs) provided by the SAP NetWeaver Process Integration (SAP_XIESR and SAP_XITOOL: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50) do not restrict or incorrectly restrict frame objects or UI layers that belong to another application or domain, resulting in Clickjacking vulnerability. Successful exploitation of this vulnerability leads to unwanted modification of user's data.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-1021

References (3)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner sap
Published Jun 12, 2019
Updated Aug 4, 2024
Reserved Nov 26, 2018
Link CVE-2019-0305
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2019-0305
Red Hat
Severity n/a
Public date n/a
Links CVE-2019-0305
ENISA EUVD
Assigner sap
Published Jun 12, 2019
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2019-1078
EUVD-2019-1078