Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveSapCVE-2021-40495
HistoryOct 12, 2021 - 3:15 p.m.

CVE-2021-40495

2021-10-1215:15:09
sap
web.nvd.nist.gov
37
sap
netweaver
abap
platform
dos
vulnerability
cve-2021-40495

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

42.7%

JSON

There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755. An unauthorized attacker can use the public SICF service /sap/public/bc/abap to reduce the performance of SAP NetWeaver Application Server ABAP and ABAP Platform.

Affected configurations

Nvd
Node
sapnetweaver_abapMatch740
OR
sapnetweaver_abapMatch750
OR
sapnetweaver_abapMatch751
OR
sapnetweaver_abapMatch752
OR
sapnetweaver_abapMatch753
OR
sapnetweaver_abapMatch754
OR
sapnetweaver_abapMatch755
OR
sapnetweaver_application_server_abapMatch740
OR
sapnetweaver_application_server_abapMatch750
OR
sapnetweaver_application_server_abapMatch751
OR
sapnetweaver_application_server_abapMatch752
OR
sapnetweaver_application_server_abapMatch753
OR
sapnetweaver_application_server_abapMatch754
OR
sapnetweaver_application_server_abapMatch755
VendorProductVersionCPE
sapnetweaver_abap740cpe:2.3:a:sap:netweaver_abap:740:*:*:*:*:*:*:*
sapnetweaver_abap750cpe:2.3:a:sap:netweaver_abap:750:*:*:*:*:*:*:*
sapnetweaver_abap751cpe:2.3:a:sap:netweaver_abap:751:*:*:*:*:*:*:*
sapnetweaver_abap752cpe:2.3:a:sap:netweaver_abap:752:*:*:*:*:*:*:*
sapnetweaver_abap753cpe:2.3:a:sap:netweaver_abap:753:*:*:*:*:*:*:*
sapnetweaver_abap754cpe:2.3:a:sap:netweaver_abap:754:*:*:*:*:*:*:*
sapnetweaver_abap755cpe:2.3:a:sap:netweaver_abap:755:*:*:*:*:*:*:*
sapnetweaver_application_server_abap740cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*
sapnetweaver_application_server_abap750cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*
sapnetweaver_application_server_abap751cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*
Rows per page:
1-10 of 141

CNA Affected

[
  {
    "product": "SAP NetWeaver AS ABAP and ABAP Platform",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< 740"
      },
      {
        "status": "affected",
        "version": "< 750"
      },
      {
        "status": "affected",
        "version": "< 751"
      },
      {
        "status": "affected",
        "version": "< 752"
      },
      {
        "status": "affected",
        "version": "< 753"
      },
      {
        "status": "affected",
        "version": "< 754"
      },
      {
        "status": "affected",
        "version": "< 755"
      }
    ]
  }
]

Related

prion 1
cvelist 1
nvd 1
cnvd 1
nessus 1
prion
prion
Denial of service
2021-10-12 15:15:00
cvelist
cvelist
CVE-2021-40495
2021-10-12 14:03:19
nvd
nvd
CVE-2021-40495
2021-10-12 15:15:09
cnvd
cnvd
SAP NetWeaver Application Server Denial of Service Vulnerability
2021-10-15 00:00:00
nessus
nessus
SAP NetWeaver AS ABAP Multiple Vulnerabilities (Oct 2021)
2021-10-14 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

42.7%

JSON
Related for CVE-2021-40495
prion1cvelist1nvd1cnvd1nessus1