Denial of Service Vulnerability in SAP NetWeaver AS JAVA
CVE-2017-14581

7.5HIGH

Key Information:

Vendor
SAP
Status
Netweaver Application Server Java
Vendor
CVE Published:
19 September 2017

Summary

The Host Control web service in SAP NetWeaver AS JAVA versions 7.0 through 7.5 is susceptible to a denial of service vulnerability. Through a specially crafted request, remote attackers can exploit this weakness to cause a service crash, disrupting normal operations and availability. Organizations using these versions should implement necessary security measures to mitigate potential risks as outlined in SAP Security Note 2389181.

References

https://erpscan.io/advisories/erpscan-17-030-sap-hostcont...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.