CVE-2019-0330 - The OS Command Plugin in the transaction GPA_ADMIN and the OSCommand Console of SAP Diagnostic Agent (LM-Service), version 7.2, allow an attacker to inject code that can be executed by the application

Back Back to CVE browser

CRITICAL

The OS Command Plugin in the transaction GPA_ADMIN and the OSCommand Console of SAP Diagnostic Agent (LM-Service), version 7.2, allow an attacker to inject code that can be executed by the application

Published Jul 10, 2019

9.1

CRITICAL

CVSS 3.1

EPSS 2.17%

Description

The OS Command Plugin in the transaction GPA_ADMIN and the OSCommand Console of SAP Diagnostic Agent (LM-Service), version 7.2, allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.

Affected products

Vendor SAP SE Product SAP Diagnostic Agent (LM-Service) Default
n/a
- Version
  < 7.20
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SAP SE

SAP Diagnostic Agent (LM-Service)

n/a

Version	Status	Constraints
< 7.20	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (3)

http://www.securityfocus.com/bid/109068
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://launchpad.support.sap.com/#/notes/2808158
x_refsource_MISCPermissions RequiredVendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/109068		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://launchpad.support.sap.com/#/notes/2808158		x_refsource_MISCPermissions RequiredVendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner sap

Published Jul 10, 2019

Updated Aug 4, 2024

Reserved Nov 26, 2018

Link CVE-2019-0330

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-0330

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-0330