What is CVE-2024-47586?

CVE-2024-47586 is a medium-severity vulnerability in SAP Se Netweaver Application Server For Abap And Platform, classified under NULL Pointer Dereference. CVSS score: 5.3/10. Published 2024-11-12.

How severe is CVE-2024-47586?

Medium severity. CVSS v3 base score is 5.3 out of 10.

NULL pointer dereference in SAP Se Netweaver Application Server For Abap And Platform

CVE-2024-47586

SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated attacker to send a maliciously crafted http request which could cause a null pointer dereference in the kernel. This dereference will result in the system crashing and rebooting, causing the system to be temporarily unavailable. There is no impact on Confidentiality or Integrity.

EPSS: 0.035 (88.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Sap_se Sap Netweaver Application Server For Abap And Platform — versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22

Weakness classification (CWE)

CWE-476 — NULL Pointer Dereference

References

Frequently asked questions

What is CVE-2024-47586?: CVE-2024-47586 is a medium-severity vulnerability in SAP Se Netweaver Application Server For Abap And Platform, classified under NULL Pointer Dereference. CVSS score: 5.3/10. Published 2024-11-12.
How severe is CVE-2024-47586?: Medium severity. CVSS v3 base score is 5.3 out of 10.