CVE-2018-2433

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-07-10 · updated 2026-06-17

Description

SAP Gateway (SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49 and 7.53) allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.

Affected products

SAP Startup Service: 7.21, 7.21ext, 7.22, 7.22ext, 7.45, 7.49 (+1)

References

https://launchpad.support.sap.com/#/notes/2597913
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000
https://launchpad.support.sap.com/#/notes/2597913
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000

Get alerted when CVE-2018-2433 or the next vulnerability affects your stack