« Volver al listado

CVE-2021-40495

Estado: ModificadaMedia (5.3)—

There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755. An unauthorized attacker can use the public SICF service /sap/public/bc/abap to reduce the performance of SAP NetWeaver Application Server ABAP and ABAP Platform.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

SAP — Netweaver AbapSAP — Netweaver Application Server Abap

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-40495",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cna@sap.com",
      "affectedData": [
        {
          "vendor": "SAP SE",
          "product": "SAP NetWeaver AS ABAP and ABAP Platform",
          "versions": [
            {
              "status": "affected",
              "version": "< 740"
            },
            {
              "status": "affected",
              "version": "< 750"
            },
            {
              "status": "affected",
              "version": "< 751"
            },
            {
              "status": "affected",
              "version": "< 752"
            },
            {
              "status": "affected",
              "version": "< 753"
            },
            {
              "status": "affected",
              "version": "< 754"
            },
            {
              "status": "affected",
              "version": "< 755"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-10-12T15:15:09.127",
  "references": [
    {
      "url": "https://launchpad.support.sap.com/#/notes/3099011",
      "tags": [
        "Permissions Required"
      ],
      "source": "cna@sap.com"
    },
    {
      "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cna@sap.com"
    },
    {
      "url": "https://launchpad.support.sap.com/#/notes/3099011",
      "tags": [
        "Permissions Required"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755. An unauthorized attacker can use the public SICF service /sap/public/bc/abap to reduce the performance of SAP NetWeaver Application Server ABAP and ABAP Platform."
    },
    {
      "lang": "es",
      "value": "Se presentan múltiples vulnerabilidades de denegación de servicio en SAP NetWeaver Application Server for ABAP y ABAP Platform - versiones 740, 750, 751, 752, 753, 754, 755. Un atacante no autorizado puede usar el servicio público SICF /sap/public/bc/abap para reducir el rendimiento de SAP NetWeaver Application Server ABAP y ABAP Platform"
    }
  ],
  "lastModified": "2026-06-17T04:07:02.537",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sap:netweaver_abap:740:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "09A38B6E-03DC-4086-A307-542B35814E0E"
            },
            {
              "criteria": "cpe:2.3:a:sap:netweaver_abap:750:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4651257F-7BFC-41AE-8E37-8C96F822CE58"
            },
            {
              "criteria": "cpe:2.3:a:sap:netweaver_abap:751:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EECB438D-D5CD-4483-934F-4C814A725A35"
            },
            {
              "criteria": "cpe:2.3:a:sap:netweaver_abap:752:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "14A1CD95-14E1-438A-92FB-A0E47A88C59F"
            },
            {
              "criteria": "cpe:2.3:a:sap:netweaver_abap:753:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4148303B-133A-4FD2-B546-DD86C5D0E7C1"
            },
            {
              "criteria": "cpe:2.3:a:sap:netweaver_abap:754:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E51EF6BC-4C1C-4F1B-9873-D571BE3788F5"
            },
            {
              "criteria": "cpe:2.3:a:sap:netweaver_abap:755:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "424A3D68-0825-4A2C-BEB1-DC9A212A5E42"
            },
            {
              "criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "127E508F-6CC1-41C8-96DF-8D14FFDD4020"
            },
            {
              "criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7777AA80-1608-420E-B7D5-09ABECD51728"
            },
            {
              "criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0539618A-1C4D-463F-B2BB-DD1C239C23EB"
            },
            {
              "criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "62828DCD-F80E-4C7C-A988-EFEA06A5223E"
            },
            {
              "criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D9F38585-73AE-4DBB-A978-F0272DF8FB58"
            },
            {
              "criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D416C064-BB8A-4230-A761-84A93E017F79"
            },
            {
              "criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6B8D3EA0-28E6-4333-8C67-B9D3775EB9BC"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cna@sap.com"
}