VULNERABILITY INTELLIGENCE
CVE-2024-47586
CVSS score5.3 MEDIUM
EPSS probability3.54%
CISA KEVNot currently listed
Published2024-11-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Description
SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated attacker to send a maliciously crafted http request which could cause a null pointer dereference in the kernel. This dereference will result in the system crashing and rebooting, causing the system to be temporarily unavailable. There is no impact on Confidentiality or Integrity.
Weakness classification
- cna@sap.com: CWE-476