CVE-2021-21446
HIGHSAP NetWeaver AS ABAP 740,750-755 - Unauthenticated Denial of Service
Title source: llmDescription
SAP NetWeaver AS ABAP, versions 740, 750, 751, 752, 753, 754, 755, allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service, this has a high impact on the availability of the service.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_misc
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476
Permissions Required x_refsource_misc
https://launchpad.support.sap.com/#/notes/3000306
Scores
CVSS v3
7.5
EPSS
0.0053
EPSS Percentile
67.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
Status
published
Products (7)
sap/netweaver_application_server_abap
740
sap/netweaver_application_server_abap
750
sap/netweaver_application_server_abap
751
sap/netweaver_application_server_abap
752
sap/netweaver_application_server_abap
753
sap/netweaver_application_server_abap
754
sap/netweaver_application_server_abap
755
Published
Jan 12, 2021
Tracked Since
Feb 18, 2026