CVEvulnerability
CVE-2024-33001
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-06-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-400
Description
SAP NetWeaver and ABAP platform allows an
attacker to impede performance for legitimate users by crashing or flooding the
service.
An
impact of this Denial of Service vulnerability might be long response delays
and service interruptions, thus degrading the service quality experienced by
legitimate users causing high impact on availability of the application.
Affected configurations
• sap netweaver application server abap 740
• sap netweaver application server abap 2008 1 710
• sap netweaver application server abap st-pi 2008 1 700
Related
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness
References
- https://me.sap.com/notes/3453170 Permissions Required
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html Patch, Vendor Advisory
- https://me.sap.com/notes/3453170 Permissions Required
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html Patch, Vendor Advisory