Medium severity5.3NVD Advisory· Published Oct 12, 2021· Updated Jun 17, 2026
CVE-2021-40495
CVE-2021-40495
Description
There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755. An unauthorized attacker can use the public SICF service /sap/public/bc/abap to reduce the performance of SAP NetWeaver Application Server ABAP and ABAP Platform.
Affected products
17cpe:2.3:a:sap:netweaver_abap:740:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:sap:netweaver_abap:740:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_abap:750:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_abap:751:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_abap:752:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_abap:753:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_abap:754:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_abap:755:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*
- (no CPE)range: 740, 750, 751, 752, 753, 754, 755
- Range: 740, 750, 751, 752, 753, 754, 755
- SAP SE/SAP NetWeaver AS ABAP and ABAP Platformv5Range: < 740
Patches
Vulnerability mechanics
References
2- wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory
- launchpad.support.sap.comnvdPermissions Required
News mentions
0No linked articles in our index yet.