6.5Media

CVE-2026-109802Denial of Service (DoS) vulnerability in SAP NetWeaver Application Server for ABAP

SAP_SE SAP NetWeaver Application Server for ABAP Publicada: (hace 5 días)

Descripción

SAP NetWeaver Application Server for ABAP does not properly validate certain input values. An authenticated user could send specially crafted requests to trigger an error in internal processing. This could crash the affected work process and make the system unavailable. This results in a high impact on availability with no impact on confidentiality and integrity.

Debilidad (CWE): CWE-369

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
SAP_SE SAP NetWeaver Application Server for ABAP KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.53, 8.04, KERNEL 7.22, 7.54, 7.77, 7.93, 9.16, 9.18, 9.20, 9.21

Referencias y parches