Description
SAP NetWeaver AS JAVA, versions - (ENGINEAPI 7.10; WSRM 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; J2EE-FRMW 7.10, 7.11), does not perform any authentication checks for a web service allowing the attacker to send several payloads and leading to complete denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP SE | SAP NetWeaver AS JAVA (ENGINEAPI) | < 7.10 | — |
| SAP SE | SAP NetWeaver AS JAVA (WSRM) | < 7.10, < 7.11, < 7.20, < 7.30, < 7.31, < 7.40, < 7.50 | — |
| SAP SE | SAP NetWeaver AS JAVA (J2EE-FRMW) | < 7.10, < 7.11 | — |