| Package | Affected versions | Patched versions |
|---|---|---|
| sap kernel | = 7.21= 7.22= 7.42 |
The SAP Message Server HTTP daemon in SAP KERNEL 7.21-7.49 allows remote attackers to cause a denial of service (memory consumption and process crash) via multiple msgserver/group?group= requests with a crafted size of the group parameter, aka SAP Security Note 2358972.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free