VDB
CVE-2024-47586
CVE-2024-47586
PUBLISHED
CVSS 5.3 MEDIUM
Reported by sap · Published November 12, 2024
SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated attacker to send a maliciously crafted http request which could cause a null pointer dereference in the kernel. This dereference will result in the system crashing and rebooting, causing the system to be temporarily unavailable. There is no impact on Confidentiality or Integrity.
Risk scores
CVSS 3.1
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
| Vendor | Product | Versions |
|---|---|---|
| SAP_SE | SAP NetWeaver Application Server for ABAP and ABAP Platform | KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22 |
| sap | netweaver_abap_application_server | 7.22, 7.22EXT, 7.53 |
| SAP_SE | SAP NetWeaver Application Server for ABAP and ABAP Platform | 7.22EXT, 8.04, 7.54 |
Timeline
- Nov 11, 2024 CVE Published
- Nov 12, 2024 EPSS Score (30 in total, the first dated here)
- Nov 12, 2024 Coalition ESS Score (9 in total, the first dated here)
- Jun 2, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2024-47586
vulnetix vdb fixes CVE-2024-47586Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-47586/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart