The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted request, aka SAP Security Note 2258784.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Netweaver | Sap | 7.1 (including) | 7.1 (including) |
| Netweaver | Sap | 7.2 (including) | 7.2 (including) |
| Netweaver | Sap | 7.3 (including) | 7.3 (including) |
| Netweaver | Sap | 7.4 (including) | 7.4 (including) |
References
- https://erpscan.io/advisories/erpscan-16-019-sap-netweaver-enqueue-server-dos-vulnerability/
- https://erpscan.io/press-center/blog/dos-vulnerabilities-on-the-rise-sap-security-notes-april-2016/
- https://erpscan.io/advisories/erpscan-16-019-sap-netweaver-enqueue-server-dos-vulnerability/
- https://erpscan.io/press-center/blog/dos-vulnerabilities-on-the-rise-sap-security-notes-april-2016/