CVE-2019-0267
High
Description
SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, (Illuminator Servlet) currently does not provide Anti-XSRF tokens. This might lead to XSRF attacks in case the data is being posted to the Servlet from an external application.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Sap Manufacturing Integration And Intelligence
PublishedFeb 15, 2019
First seenFeb 15, 2019
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap manufacturing_integration_and_intelligence | 15.0, 15.1, 15.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.