CVE-2024-34688CWE-400

Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository)

High · published June 11, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
44.7
In the wild
Unconfirmed
What it is

Due to unrestricted access to the Meta Model

Repository services in SAP NetWeaver AS Java, attackers can perform DoS attacks

on the application, which may prevent legitimate users from accessing it. This

can result in no impact on confidentiality and integrity but a high impact on

the availability of the application.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00541 · 44.7th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2024-06-11T02:02Z
EPSS history
Timeline
  • 11 JUN 02:02Z
    Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository)
    cvelistv5