cbcvebase.
CVE-2021-40495
published 2021-10-12

CVE-2021-40495: There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754…

medium5.3CVSS 3.1
AVNACLPRNUINSUCNINAL
There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755. An unauthorized attacker can use the public SICF service /sap/public/bc/abap to reduce the performance of SAP NetWeaver Application Server ABAP and ABAP Platform.

Affected

21 ranges
VendorProductVersion rangeFixed in
sapnetweaver_abap
sapnetweaver_abap
sapnetweaver_abap
sapnetweaver_abap
sapnetweaver_abap
sapnetweaver_abap
sapnetweaver_abap
sapnetweaver_application_server_abap
sapnetweaver_application_server_abap
sapnetweaver_application_server_abap
sapnetweaver_application_server_abap
sapnetweaver_application_server_abap
sapnetweaver_application_server_abap
sapnetweaver_application_server_abap
sap_sesap_netweaver_as_abap_and_abap_platform< 740740
sap_sesap_netweaver_as_abap_and_abap_platform< 750750
sap_sesap_netweaver_as_abap_and_abap_platform< 751751
sap_sesap_netweaver_as_abap_and_abap_platform< 752752
sap_sesap_netweaver_as_abap_and_abap_platform< 753753
sap_sesap_netweaver_as_abap_and_abap_platform< 754754
sap_sesap_netweaver_as_abap_and_abap_platform< 755755