Sap Gateway vulnerabilities

2 vulnerabilities

Known vulnerabilities in Sap Gateway, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2019-0338sap_sesap gateway+1
EPSS score
1.11%
During an OData V2/V4 request in SAP Gateway, versions 750, 751, 752, 753, the HTTP Header attributes cache-control and pragma were not properly set, allowing an attacker to access restricted information, resulting in Information Disclosure.7.5CVE-2019-0319sap_sesap gateway+2
EPSS score
2.51%
The SAP Gateway, versions 7.5, 7.51, 7.52 and 7.53, allows an attacker to inject content which is displayed in the form of an error message. An attacker could thus mislead a user to believe this information is from the legitimate service when it's not.