{"id":"CVE-2024-34688","state":"PUBLISHED","title":"Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository)","description":"Due to unrestricted access to the Meta Model\nRepository services in SAP NetWeaver AS Java, attackers can perform DoS attacks\non the application, which may prevent legitimate users from accessing it. This\ncan result in no impact on confidentiality and integrity but a high impact on\nthe availability of the application.","publishedAt":"2024-06-11T02:02:21.587Z","updatedAt":"2024-08-02T02:59:22.017Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"sap"},"assigner":"sap","products":["SAP_SE SAP NetWeaver AS Java"],"affected":[{"vendor":"SAP_SE","product":"SAP NetWeaver AS Java","defaultStatus":"unaffected","versions":[{"version":"MMR_SERVER 7.5","status":"affected"}]}],"references":["https://me.sap.com/notes/3460407","https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html"],"weaknesses":["CWE-400"],"ingestedAt":"2026-10-29T20:07:30.303Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/34xxx/CVE-2024-34688.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-34688","state":"PUBLISHED","datePublished":"2024-06-11T02:02:21.587Z","dateUpdated":"2024-08-02T02:59:22.017Z","assignerShortName":"sap","assignerOrgId":"e4686d1a-f260-4930-ac4c-2f5c992778dd","dateReserved":"2024-05-07T05:46:11.658Z"},"containers":{"cna":{"title":"Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository)","descriptions":[{"lang":"en","value":"Due to unrestricted access to the Meta Model\nRepository services in SAP NetWeaver AS Java, attackers can perform DoS attacks\non the application, which may prevent legitimate users from accessing it. This\ncan result in no impact on confidentiality and integrity but a high impact on\nthe availability of the application."}],"affected":[{"vendor":"SAP_SE","product":"SAP NetWeaver AS Java","defaultStatus":"unaffected","versions":[{"version":"MMR_SERVER 7.5","status":"affected"}]}],"references":[{"url":"https://me.sap.com/notes/3460407"},{"url":"https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-400","description":"CWE-400: Uncontrolled Resource Consumption","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"sap","orgId":"e4686d1a-f260-4930-ac4c-2f5c992778dd","dateUpdated":"2024-06-11T10:12:32.680Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"sap","product":"netweaver","defaultStatus":"unknown","versions":[{"version":"7.50","status":"affected"}],"cpes":["cpe:2.3:a:sap:netweaver:7.50:*:*:*:java_as:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-06-11T13:36:48.543897Z","id":"CVE-2024-34688","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-11T13:40:34.530Z"}},{"title":"CVE Program Container","references":[{"url":"https://me.sap.com/notes/3460407","tags":["x_transferred"]},{"url":"https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T02:59:22.017Z"}}]}}}