Skip to content
OpenAdvisories
Unscored CVE-2021-40495 EUVD-2021-27671GHSA-c7v9-3364-rhjg

There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 75…

Published Oct 12, 2021 · Updated Aug 4, 2024 · Assigned by sap

Description

There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755. An unauthorized attacker can use the public SICF service /sap/public/bc/abap to reduce the performance of SAP NetWeaver Application Server ABAP and ABAP Platform.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver AS ABAP and ABAP Platform < 740, < 750, < 751, < 752, < 753, < 754, < 755 —

References