{"id":"CVE-2024-33001","state":"PUBLISHED","title":"Denial of service (DOS) in SAP NetWeaver and ABAP platform","description":"SAP NetWeaver and ABAP platform allows an\nattacker to impede performance for legitimate users by crashing or flooding the\nservice.\n\n\n\nAn\nimpact of this Denial of Service vulnerability might be long response delays\nand service interruptions, thus degrading the service quality experienced by\nlegitimate users causing high impact on availability of the application.","publishedAt":"2024-06-11T02:05:00.333Z","updatedAt":"2024-08-02T02:27:53.403Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","source":"sap"},"assigner":"sap","products":["SAP_SE SAP NetWeaver and ABAP platform"],"affected":[{"vendor":"SAP_SE","product":"SAP NetWeaver and ABAP platform","defaultStatus":"unaffected","versions":[{"version":"ST-PI 2008_1_700","status":"affected"},{"version":"2008_1_710","status":"affected"},{"version":"740","status":"affected"}]}],"references":["https://me.sap.com/notes/3453170","https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html"],"weaknesses":["CWE-400"],"ingestedAt":"2026-10-29T20:07:30.303Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/33xxx/CVE-2024-33001.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-33001","state":"PUBLISHED","datePublished":"2024-06-11T02:05:00.333Z","dateUpdated":"2024-08-02T02:27:53.403Z","assignerShortName":"sap","assignerOrgId":"e4686d1a-f260-4930-ac4c-2f5c992778dd","dateReserved":"2024-04-23T04:04:25.520Z"},"containers":{"cna":{"title":"Denial of service (DOS) in SAP NetWeaver and ABAP platform","descriptions":[{"lang":"en","value":"SAP NetWeaver and ABAP platform allows an\nattacker to impede performance for legitimate users by crashing or flooding the\nservice.\n\n\n\nAn\nimpact of this Denial of Service vulnerability might be long response delays\nand service interruptions, thus degrading the service quality experienced by\nlegitimate users causing high impact on availability of the application."}],"affected":[{"vendor":"SAP_SE","product":"SAP NetWeaver and ABAP platform","defaultStatus":"unaffected","versions":[{"version":"ST-PI 2008_1_700","status":"affected"},{"version":"2008_1_710","status":"affected"},{"version":"740","status":"affected"}]}],"references":[{"url":"https://me.sap.com/notes/3453170"},{"url":"https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-400","description":"CWE-400: Uncontrolled Resource Consumption","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"sap","orgId":"e4686d1a-f260-4930-ac4c-2f5c992778dd","dateUpdated":"2024-06-11T02:05:00.333Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"sap_se","product":"sap_netweaver_and_abap_platform","defaultStatus":"unknown","versions":[{"version":"740","status":"affected"},{"version":"2008_1_710","status":"affected"},{"version":"ST-PI_2008_1_700","status":"affected"}],"cpes":["cpe:2.3:a:sap_se:sap_netweaver_and_abap_platform:740:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-07-18T19:53:26.938876Z","id":"CVE-2024-33001","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-30T17:29:13.906Z"}},{"title":"CVE Program Container","references":[{"url":"https://me.sap.com/notes/3453170","tags":["x_transferred"]},{"url":"https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T02:27:53.403Z"}}]}}}