CVE-2021-40495
There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755. An unauthorized attacker can use the public SICF service /sap/public/bc/abap to reduce the performance of SAP NetWeaver Application Server ABAP and ABAP Platform.
- Score
- CVSS 3.1 5.3 Medium
- Status
- Modified - cna@sap.com
- Published
- 2021-10-12
- Last modified
- 2024-08-04
Affected products
- Netweaver Abap (Sap)
- Netweaver Application Server Abap (Sap)
- Sap Netweaver As Abap And Abap Platform (Sap Se)
References
- https://launchpad.support.sap.com/#/notes/3099011
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983
