CVE-2014-6252

MEDIUM 6.5CVE-2014-6252 · Published 05/09/2014 · updated 17/06/2026

In short

CVE-2014-6252 is a MEDIUM (CVSS 6.5) vulnerability affecting netweaver (sap).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
netweaver sap	`= 7.0= 7.20`	No fix yet

Description

Buffer overflow in disp+work.exe 7000.52.12.34966 and 7200.117.19.50294 in the Dispatcher in SAP NetWeaver 7.00 and 7.20 allows remote authenticated users to cause a denial of service or execute arbitrary code via unspecified vectors.

References

scn.sap.com/docs/DOC-8218
secunia.com/advisories/60496
erpscan.io/advisories/erpscan-14-011-sap-netweaver-dispatcher-buffer-overflow-rce-dos
exchange.xforce.ibmcloud.com/vulnerabilities/96196
service.sap.com/sap/support/notes/2018221

More vulnerabilities in netweaver

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

netweaver

sap

= 7.0= 7.20

No fix yet

More vulnerabilities in netweaver

See all →