Vulnerability Description
Due to unrestricted access to the Meta Model Repository services in SAP NetWeaver AS Java, attackers can perform DoS attacks on the application, which may prevent legitimate users from accessing it. This can result in no impact on confidentiality and integrity but a high impact on the availability of the application.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sap | Netweaver Application Server Java | mmr_server_7.5 |
Related Weaknesses (CWE)
References
- https://me.sap.com/notes/3460407Permissions Required
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.htmlPatchVendor Advisory
- https://me.sap.com/notes/3460407Permissions Required
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.htmlPatchVendor Advisory
FAQ
What is CVE-2024-34688?
CVE-2024-34688 is a vulnerability with a CVSS score of 7.5 (HIGH). Due to unrestricted access to the Meta Model Repository services in SAP NetWeaver AS Java, attackers can perform DoS attacks on the application, which may prevent legitimate users from accessing it. T...
How severe is CVE-2024-34688?
CVE-2024-34688 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-34688?
Check the references section above for vendor advisories and patch information. Affected products include: Sap Netweaver Application Server Java.