| Package | Affected versions | Patched versions |
|---|---|---|
| netweaver abap | = 7.22= 7.22ext= 7.49= 7.53= 7.77= 7.81= 7.85= 7.86= 7.87= 8.04= krnl64nuc_7.22= krnl64nuc_8.04 | |
| netweaver as abap | = 7.22= 7.22ext= 7.49= 7.53= 7.77= 7.81= 7.85= 7.86= 7.87= 8.04= krnl64nuc_7.22= krnl64nuc_8.04 |
SAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel) - versions KERNEL 7.22, 8.04, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, KRNL64UC 8.04, 7.22, 7.22EXT, 7.49, 7.53, KRNL64NUC 7.22, 7.22EXT, 7.49, does not sufficiently validate sap-passport information, which could lead to a Denial-of-Service attack. This allows an unauthorized remote user to provoke a breakdown of the SAP Web Dispatcher or Kernel work process. The crashed process can be restarted immediately, other processes are not affected.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free