CVE-2024-30218

Published: Apr 9, 2024Modified: Jun 17, 2026Deferred

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: CNA (Secondary)

Description

The ABAP Application Server of SAP NetWeaver as well as ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. This leads to a considerable impact on availability.

Related CWEs

CWE-605

Multiple Binds to the Same Port

When multiple sockets are allowed to bind to the same port, other services on that port may be stolen or spoofed.

References (4)

https://me.sap.com/notes/3359778

Source: cna@sap.com

https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364

Source: cna@sap.com

https://me.sap.com/notes/3359778

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.