SAP NetWeaver Application Server ABAP and SAP Web Dispatcher do not sufficiently validate certain header values processed during inbound request…
SAP NetWeaver Application Server ABAP and SAP Web Dispatcher do not sufficiently validate certain header values processed during inbound request handling. An unauthenticated attacker could send a specially crafted request to cause the affected process to become unavailable.This results in a high impact on availability. There is no impact on confidentiality and integrity.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- SAP_SE
- Product
- SAP NetWeaver Application Server ABAP (Internet Communication Manager) and SAP Web Dispatcher
- CVSS v3.1
- 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weakness
- CWE-121
- Exposure class
- Web platform, Network management
- NVD status
- Received
Why it ranks 36 (Notable)
- CVSS v3.1 7.5 high
- Product class: web platform, network management
- Widely deployed vendor product (SAP_SE)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.