CVE-2024-33001

MEDIUM

SAP NetWeaver and ABAP Platform - Denial of Service

Title source: llm

Description

SAP NetWeaver and ABAP platform allows an attacker to impede performance for legitimate users by crashing or flooding the service. An impact of this Denial of Service vulnerability might be long response delays and service interruptions, thus degrading the service quality experienced by legitimate users causing high impact on availability of the application.

References (2)

Core 2

Core References

Permissions Required

https://me.sap.com/notes/3453170

Patch, Vendor Advisory

https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html

Scores

CVSS v3 6.5

EPSS 0.0042

EPSS Percentile 62.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-400

Status published

Products (3)

sap/netweaver_application_server_abap 740

sap/netweaver_application_server_abap 2008_1_710

sap/netweaver_application_server_abap st-pi_2008_1_700

Published Jun 11, 2024

Tracked Since Feb 18, 2026