High severity7.5NVD Advisory· Published Jul 12, 2017· Updated Jun 17, 2026

CVE-2017-9845

Description

disp+work 7400.12.21.30308 in SAP NetWeaver 7.40 allows remote attackers to cause a denial of service (resource consumption) via a crafted DIAG request, aka SAP Security Note 2405918.

Affected products

SAP/Netweaver2 versions
cpe:2.3:a:sap:netweaver:7.40:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sap:netweaver:7.40:*:*:*:*:*:*:*
- (no CPE)range: 7.40 (disp+work 7400.12.21.30308)

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/96874nvdThird Party AdvisoryVDB Entry
erpscan.io/advisories/erpscan-17-015-sap-netweaver-dispwork-anonymous-denial-service/nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000