CVE-2017-9843

LOW 2.7CVE-2017-9843 · Published 12/07/2017 · updated 17/06/2026

In short

CVE-2017-9843 is a LOW (CVSS 2.7) vulnerability affecting netweaver abap (sap).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 82.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
netweaver abap sap	`= 7.40`	No fix yet

Description

SAP NetWeaver AS ABAP 7.40 allows remote authenticated users with certain privileges to cause a denial of service (process crash) via vectors involving disp+work.exe, aka SAP Security Note 2406841.

References

securityfocus.com/bid/96900 · Broken Link
erpscan.io/advisories/erpscan-17-010-sap-netweaver-abap-dispwork-crash-using-cl_java_script · Broken Link

More vulnerabilities in netweaver abap

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

netweaver abap

sap

= 7.40

No fix yet

More vulnerabilities in netweaver abap

See all →