CVE-2024-33001: Denial of service (DOS) in SAP NetWeaver and ABAP platform

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-06-11 · updated 2026-06-17
Weakness: CWE-400

Description

SAP NetWeaver and ABAP platform allows an attacker to impede performance for legitimate users by crashing or flooding the service. An impact of this Denial of Service vulnerability might be long response delays and service interruptions, thus degrading the service quality experienced by legitimate users causing high impact on availability of the application.

Affected products

SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform: 740, 2008_1_710, st-pi_2008_1_700

References

https://me.sap.com/notes/3453170
https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html
https://me.sap.com/notes/3453170
https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html

Get alerted when CVE-2024-33001 or the next vulnerability affects your stack