Description
SAP NetWeaver Application Server ABAP, ABAP Platform, and SAP Web Dispatcher do not sufficiently handle resource consumption when processing certain requests. An unauthenticated attacker could send specially crafted requests to the affected component, causing excessive resource utilization and service disruption. This results in a high impact on availability. There is no impact on confidentiality and integrity.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP NetWeaver Application Server ABAP, ABAP Platform and SAP Web Dispatcher | WEBDISP 7.77, 7.93, 9.16, XS_ADVANCED_RUNTIME 1.0, KERNEL 7.77 | — |
Advisories 2
- NCSC-2026-0485 Kwetsbaarheden verholpen in SAP-producten NCSC-NL (Netherlands) · Nov 12, 2026
- WID-SEC-2026-4420 SAP Patch Day November 2026: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 9, 2026