CVE-2011-1517: SAP NetWeaver

Critical severity, CVSS 9.8. EPSS: 4.2% chance of exploitation in the next 30 days.

SAP NetWeaver 7.0 allows Remote Code Execution and Denial of Service caused by an error in the DiagTraceHex() function. By sending a specially-crafted packet, an attacker could exploit this vulnerability to cause the application to crash.

Affected products

• SAP NetWeaver: version 7.0 only

Published 2020-02-05. Last modified 2026-06-16.