Description (CNA)
SAP NetWeaver Application Server ABAP (BIC Document) allows an authenticated attacker to craft a request that, when submitted to a BIC Document application, could cause a memory corruption error. On successful exploitation, this results in the crash of the target component. Multiple submissions can make the target completely unavailable. A similarly crafted submission can be used to perform an out-of-bounds read operation as well, revealing sensitive information that is loaded in memory at that time. There is no ability to modify any information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP_SE / SAP NetWeaver Application Server ABAP (BIC Document) | affected S4COREOP 104; affected 105; affected 106; affected 107; affected 108; affected SEM-BW 600; affected 602; affected 603; affected 604; affected 605; affected 634; affected 736; affected 746; affected 747; affected 748 |
CWE
CWE-125
References
ADP enrichment
No English description supplied.
No references supplied.