{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-04T19:09:29.646","vulnerabilities":[{"cve":{"id":"CVE-2019-0393","sourceIdentifier":"cna@sap.com","published":"2019-11-13T22:15:11.850","lastModified":"2026-06-17T02:08:18.030","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An SQL Injection vulnerability in SAP Quality Management (corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03) allows an attacker to carry out targeted database queries that can read individual fields of historical inspection results."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en SAP Quality Management (corregida en S4CORE versiones 1.0, 1.01, 1.02, 1.03), permite a un atacante realizar consultas de bases de datos específicas que pueden leer campos individuales de resultados de inspecciones históricas."}],"affected":[{"source":"cna@sap.com","affectedData":[{"vendor":"SAP SE","product":"SAP Quality Management (S4CORE)","versions":[{"version":"< 1.0","status":"affected"},{"version":"< 1.01","status":"affected"},{"version":"< 1.02","status":"affected"},{"version":"< 1.03","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:quality_management:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0600F296-CF2A-488C-A09B-1EDC66AFA115"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:quality_management:1.01:*:*:*:*:*:*:*","matchCriteriaId":"A901E9B0-A2A3-4F05-AFE4-BB4749A4EEE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:quality_management:1.02:*:*:*:*:*:*:*","matchCriteriaId":"71BF779F-8AE4-4C69-994B-0647E0115E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:quality_management:1.03:*:*:*:*:*:*:*","matchCriteriaId":"EB2C1783-4E5B-4FD0-94C5-B1093BF6C594"}]}]}],"references":[{"url":"https://launchpad.support.sap.com/#/notes/2816035","source":"cna@sap.com","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390","source":"cna@sap.com","tags":["Vendor Advisory"]},{"url":"https://launchpad.support.sap.com/#/notes/2816035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}