CVE-2021-40495

CVE-2021-40495: vulnerability in SAP NetWeaver AS ABAP and ABAP Platform

Published · Updated

Follow this CVE+ Monitor ABAP Platform+ Monitor SAP NetWeaver AS ABAP

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.1%
There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755. An unauthorized attacker can use the public SICF service /sap/public/bc/abap to reduce the performance of SAP NetWeaver Application Server ABAP and ABAP Platform.
Affected products
SAP SE · SAP NetWeaver AS ABAP and ABAP Platform
Related CVEs — SAP NetWeaver AS ABAP and ABAP Platform

In the same product, most dangerous first.

CVE-2021-27610CRITICALCVE-2021-27610EPSS 1.3%CVE-2021-38178—CVE-2021-38178EPSS 1.3%CVE-2021-38181—CVE-2021-38181EPSS 1.1%CVE-2021-33684MEDIUMCVE-2021-33684EPSS 1.0%CVE-2021-40496—CVE-2021-40496EPSS 0.9%CVE-2021-33677MEDIUMCVE-2021-33677EPSS 0.9%