Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-30218 EUVD-2024-28149GHSA-f3g2-hmgr-q2mj

Denial of service (DOS) vulnerability in SAP NetWeaver AS ABAP and ABAP Platform

Published Apr 9, 2024 · Updated Sep 28, 2024 · Assigned by sap

Description

The ABAP Application Server of SAP NetWeaver as well as ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. This leads to a considerable impact on availability.

Affected products

VendorProductAffectedFixed
SAP_SE SAP NetWeaver AS ABAP and ABAP Platform KRNL64NUC 7.22, KRNL64NUC 7.22EXT, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KERNEL 7.22, KERNEL 7.53, KERNEL 7.77, KERNEL 7.85, KERNEL 7.89, KERNEL 7.54, KERNEL 7.93 —

Advisories 1

References