CVE-2024-34688

Due to unrestricted access to the Meta Model Repository services in SAP NetWeaver AS Java, attackers can perform DoS attacks on the application, which may prevent legitimate users from accessing it. This can result in no impact on confidentiality and integrity but a high impact on the availability of the application.

Score

CVSS 3.1 7.5 High

Status

Modified - cna@sap.com

Published

2024-06-11

Last modified

2024-08-02

Weaknesses

CWE-400

Affected products

• Netweaver (Sap)
• Netweaver Application Server Java (Sap)
• Sap Netweaver As Java (Sap Se)

References

• https://me.sap.com/notes/3460407
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html