CVE-2021-33670
Assigner: sap
Published: 2021-07-14T11:04:11
State: PUBLISHED
affected: product: SAP NetWeaver AS for Java (Http Service)
vendor: SAP SE
versions: status: affected
version: < 7.10
status: affected
version: < 7.11
status: affected
version: < 7.20
status: affected
version: < 7.30
status: affected
version: < 7.31
status: affected
version: < 7.40
status: affected
version: < 7.50
descriptions: value: SAP NetWeaver AS for Java (Http Service Monitoring Filter), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to send multiple HTTP requests with different method types thereby crashing the filter and making the HTTP server unavailable to other legitimate users leading to denial of service vulnerability.
metrics: cvssV3_0: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.0
problemTypes: descriptions: description: Denial of Service
type: text