Design/Logic Flaw

2017-07-1216:29:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.3%

JSON

SAP NetWeaver AS ABAP 7.40 allows remote authenticated users with certain privileges to cause a denial of service (process crash) via vectors involving disp+work.exe, aka SAP Security Note 2406841.

CPENameOperatorVersion
netweaver_abapeq7.40

CPE	Name	Operator	Version
	netweaver_abap	eq	7.40

References

www.securityfocus.com/bid/96900

erpscan.io/advisories/erpscan-17-010-sap-netweaver-abap-dispwork-crash-using-cl_java_script/