CVE-2021-40495

Published: Oct 12, 2021Modified: Nov 21, 2024

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755. An unauthorized attacker can use the public SICF service /sap/public/bc/abap to reduce the performance of SAP NetWeaver Application Server ABAP and ABAP Platform.

Affected (14)

Products: Sap: Netweaver Abap, Netweaver Application Server Abap

Sap

2 products

Netweaver Abap

Netweaver Application Server Abap

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Sap Netweaver Abap	Version 740
Sap Netweaver Abap	Version 750
Sap Netweaver Abap	Version 751
Sap Netweaver Abap	Version 752
Sap Netweaver Abap	Version 753
Sap Netweaver Abap	Version 754
Sap Netweaver Abap	Version 755
Sap Netweaver Application Server Abap	Version 740
Sap Netweaver Application Server Abap	Version 750
Sap Netweaver Application Server Abap	Version 751
Sap Netweaver Application Server Abap	Version 752
Sap Netweaver Application Server Abap	Version 753
Sap Netweaver Application Server Abap	Version 754
Sap Netweaver Application Server Abap	Version 755

References (4)

https://launchpad.support.sap.com/#/notes/3099011

Source: cna@sap.com

Permissions Required

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983

Source: cna@sap.com

Vendor Advisory

https://launchpad.support.sap.com/#/notes/3099011

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions Required

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.