$ cve CVE-2019-0246 JSON

CVE-2019-0246

9.8

CRITICAL · CVSS 3.0 · EPSS 2.7% (pctl 86)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

SAP Cloud Connector, before version 2.11.3, does not perform any authentication checks for functionalities that require user identity.

CVSS	9.8 (CRITICAL, v3.0)
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	2.74% — more likely to be exploited than 86% of all CVEs
Weakness	CWE-306
On CISA KEV	no
Public exploit	none known
Published	2019-01-08
Last modified	2026-06-17

Vendor	Product
sap	cloud connector