CVE-2024-33001: sap netweaver application server abap

csirt@kutim:~/threat-intel/cve/CVE-2024-33001

CVSS 6.5 · Medium EPSS 0,41%

Kerentanan Uncontrolled Resource Consumption pada sap netweaver application server abap. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

SAP NetWeaver and ABAP platform allows an attacker to impede performance for legitimate users by crashing or flooding the service. An impact of this Denial of Service vulnerability might be long response delays and service interruptions, thus degrading the service quality experienced by legitimate users causing high impact on availability of the application.

Rincian

Terbit di NVD: 11 Juni 2024
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-400: Uncontrolled Resource Consumption
EPSS (30 hari): 0,41% peluang dieksploitasi; lebih tinggi dari 33,6% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
sap	netweaver application server abap	Versi 740
sap	netweaver application server abap	Versi 2008_1_710
sap	netweaver application server abap	Versi st-pi_2008_1_700

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html patch · advisory vendor
https://me.sap.com/notes/3453170 permissions required

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.