CVE-2021-33670: High severity sap netweaver as for java vulnerability
SAP NetWeaver AS for Java (Http Service Monitoring Filter), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to send multiple HTTP requests with different method types thereby crashing the filter and making the HTTP server unavailable to other legitimate users leading to denial of service vulnerability.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-33670.
What is the severity of CVE-2021-33670?
CVE-2021-33670 has a severity rating of 7.5, which is considered high.
Which versions of SAP NetWeaver AS for Java are affected?
Versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 of SAP NetWeaver AS for Java are affected.
How does CVE-2021-33670 impact the system?
CVE-2021-33670 allows an attacker to send multiple HTTP requests with different method types, crashing the filter and making the HTTP server unavailable to other legitimate users, leading to denial of service.
Is there a fix available for CVE-2021-33670?
Yes, SAP has released a security note (3056652) that provides fixes for CVE-2021-33670. It is recommended to apply the necessary patches or updates provided by SAP.