CVE-2019-0399 - SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure

Back Back to CVE browser

MEDIUM

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure

Published Dec 11, 2019

6.5

MEDIUM

CVSS 3.1

EPSS 0.88%

Description

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure.

Affected products

Vendor SAP SE Product SAP Portfolio and Project Management (CPRXRPM) Default
n/a
- Version
  500_702
  Status
  affected
  Constraints
  -
- Version
  600_740
  Status
  affected
  Constraints
  -
- Version
  610_740
  Status
  affected
  Constraints
  -
Vendor SAP SE Product SAP Portfolio and Project Management (EPPM) Default
n/a
- Version
  100
  Status
  affected
  Constraints
  -
Vendor SAP SE Product SAP Portfolio and Project Management (S4CORE) Default
n/a
- Version
  102
  Status
  affected
  Constraints
  -
- Version
  103
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SAP SE

SAP Portfolio and Project Management (CPRXRPM)

n/a

Version	Status	Constraints
500_702	affected	-
600_740	affected	-
610_740	affected	-

SAP SE

SAP Portfolio and Project Management (EPPM)

n/a

Version	Status	Constraints
100	affected	-

SAP SE

SAP Portfolio and Project Management (S4CORE)

n/a

Version	Status	Constraints
102	affected	-
103	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://launchpad.support.sap.com/#/notes/2803554
x_refsource_CONFIRMPermissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://launchpad.support.sap.com/#/notes/2803554		x_refsource_CONFIRMPermissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner sap

Published Dec 11, 2019

Updated Aug 4, 2024

Reserved Nov 26, 2018

Link CVE-2019-0399

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-0399

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-0399