CVE-2006-6011: SAP Web Application Server

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Unspecified vulnerability in SAP Web Application Server before 6.40 patch 6 allows remote attackers to cause a denial of service (enserver.exe crash) via a certain UDP packet to port 64999, aka "two bytes UDP crash," a different vulnerability than CVE-2006-5785.

Affected products

• SAP SAP Web Application Server: version 6.40 only

Published 2006-11-21. Last modified 2026-06-16.