Description (CNA)
Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution that consumes excessive system resources, potentially rendering the system unavailable. Successful exploitation results in a denial-of-service condition that impacts availability, while confidentiality and integrity remain unaffected.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP_SE / SAP Supply Chain Management | affected SCMAPO 713; affected 714; affected S4CORE 102; affected 103; affected 104; affected S4COREOP 105; affected 106; affected 107; affected 108; affected 109; affected SCM 700; affected 701; affected 702; affected 712 |
CWE
CWE-606
References
ADP enrichment
No English description supplied.
No references supplied.