CVE:CVE-2019-0304
CNNVD:CNNVD-201906-501
SAP Netweaver是德国思爱普（SAP）公司的一套面向服务的集成化应用平台。该平台主要为SAP应用程序提供开发和运行环境。SAP NetWeaver AS ABAP Platform是一款运行于NetWeaver中且基于ABAP高级编程语言的应用服务器。
SAP NetWeaver AS ABAP Platform中存在安全漏洞。攻击者可利用该漏洞注入代码或命令，进而控制应用程序的运行。以下产品及版本受到影响：SAP NetWeaver AS ABAP Platform KRNL32NUC 7.21版本，KRNL32NUC 7.21EXT版本，KRNL32NUC 7.22版本，KRNL32NUC 7.22EXT版本，KRNL32UC 7.21版本，KRNL32UC 7.21EXT版本，KRNL32UC 7.22版本，KRNL32UC 7.22EXT版本，KRNL64NUC 7.21版本，KRNL64NUC 7.21EXT版本，KRNL64NUC 7.22版本，KRNL64NUC 7.22EXT版本，KRNL64NUC 7.49版本，KRNL64UC 7.21版本，KRNL64UC 7.21EXT版本，KRNL64UC 7.22版本，KRNL64UC 7.22EXT版本，KRNL64UC 7.49版本，KRNL64UC 7.73版本，KERNEL 7.21版本，KERNEL  7.45版本，KERNEL  7.49版本，KERNEL  7.53版本，KERNEL  7.73版本。
solution:Upgrade sap advanced_business_application_programming_platform_kernel to a higher version than 7.21,7.45,7.49,7.53,7.73,and avoid the version 7.21,7.45,7.49,7.53,7.73; Upgrade sap advanced_business_application_programming_platform_krnl32nuc to a higher version than 7.21,7.21ext,7.22,7.22ext,and avoid the version 7.21,7.21ext,7.22,7.22ext; Upgrade sap advanced_business_application_programming_platform_krnl32uc to a higher version than 7.21,7.21ext,7.22,7.22ext,and avoid the version 7.21,7.21ext,7.22,7.22ext; Upgrade sap advanced_business_application_programming_platform_krnl64nuc to a higher version than 7.21,7.21ext,7.22,7.22ext,7.49,and avoid the version 7.21,7.21ext,7.22,7.22ext,7.49; Upgrade sap advanced_business_application_programming_platform_krnl64uc to a higher version than 7.21,7.21ext,7.22,7.22ext,7.49,7.73,and avoid the version 7.21,7.21ext,7.22,7.22ext,7.49,7.73