Skip to content
OpenAdvisories
Medium · 5.3 CVE-2020-6240 EUVD-2020-27390GHSA-r5cx-qg2w-4jw8

SAP NetWeaver AS ABAP (Web Dynpro ABAP), versions (SAP_UI 750, 752, 753, 754 and SAP_BASIS 700, 710, 730, 731, 804) allows an unauthenticat…

Published May 12, 2020 · Updated Aug 4, 2024 · Assigned by sap

Vendor: SAP Product: SAP NetWeaver AS ABAP (Web Dynpro ABAP) (SAP_BASIS) Product: SAP NetWeaver AS ABAP (Web Dynpro ABAP) (SAP_UI)

Description

SAP NetWeaver AS ABAP (Web Dynpro ABAP), versions (SAP_UI 750, 752, 753, 754 and SAP_BASIS 700, 710, 730, 731, 804) allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service leading to Denial of Service

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver AS ABAP (Web Dynpro ABAP) (SAP_UI) < 750, < 752, < 753, < 754 —
SAP SE SAP NetWeaver AS ABAP (Web Dynpro ABAP) (SAP_BASIS) < 700, < 710, < 730, < 731, < 804 —

References