Skip to content
OpenAdvisories
High · 7.5 CVE-2024-34688 EUVD-2024-34987GHSA-6qmc-84fw-65c9

Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository)

Published Jun 11, 2024 · Updated Aug 2, 2024 · Assigned by sap

Description

Due to unrestricted access to the Meta Model
Repository services in SAP NetWeaver AS Java, attackers can perform DoS attacks
on the application, which may prevent legitimate users from accessing it. This
can result in no impact on confidentiality and integrity but a high impact on
the availability of the application.

Affected products

VendorProductAffectedFixed
SAP_SE SAP NetWeaver AS Java MMR_SERVER 7.5 —

Advisories 2

References