CVEvulnerability
CVE-2024-47586
5.3 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2024-11-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- Weaknesses
- CWE-476
Description
SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated attacker to send a maliciously crafted http request which could cause a null pointer dereference in the kernel. This dereference will result in the system crashing and rebooting, causing the system to be temporarily unavailable. There is no impact on Confidentiality or Integrity.
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- https://me.sap.com/notes/3504390 me.sap.com
- https://url.sap/sapsecuritypatchday url.sap