Critical severity9.8NVD Advisory· Published Feb 5, 2020· Updated Jun 16, 2026

CVE-2011-1517

Description

SAP NetWeaver 7.0 allows Remote Code Execution and Denial of Service caused by an error in the DiagTraceHex() function. By sending a specially-crafted packet, an attacker could exploit this vulnerability to cause the application to crash.

Affected products

SAP/Netweaver2 versions
cpe:2.3:a:sap:netweaver:7.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sap:netweaver:7.0:*:*:*:*:*:*:*
- (no CPE)
SAP/NetWeaverdescription

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/53424nvdThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/75452nvdThird Party AdvisoryVDB Entry
archives.neohapsis.com/archives/bugtraq/2012-05/0061.htmlnvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000