Unrated severityNVD Advisory· Published Nov 6, 2014· Updated Jun 17, 2026

CVE-2014-0995

Description

The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service (uncontrolled recursion and crash) via a trace level with a wildcard in the Trace Pattern.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

SAP/Netweaver3 versions
cpe:2.3:a:sap:netweaver:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:sap:netweaver:*:*:*:*:*:*:*:*range: <=7.01
- cpe:2.3:a:sap:netweaver:7.20:*:*:*:*:*:*:*
- (no CPE)range: <=7.20_7.01

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/128726/SAP-Netweaver-Enqueue-Server-Trace-Pattern-Denial-Of-Service.htmlnvdExploitThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2014/Oct/76nvdExploitMailing ListThird Party Advisory
www.coresecurity.com/advisories/sap-netweaver-enqueue-server-trace-pattern-denial-service-vulnerabilitynvdExploitThird Party Advisory
blog.onapsis.com/analyzing-sap-security-notes-october-2014-edition/nvdThird Party Advisory
secunia.com/advisories/60950nvdThird Party Advisory
www.securityfocus.com/archive/1/533719/100/0/threadednvdThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/97610nvdThird Party AdvisoryVDB Entry
twitter.com/SAP_Gsupport/status/522750365780160513nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.008
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000