CVE-2014-0995: SAP NetWeaver

Medium severity, CVSS 5.0. EPSS: 10.5% chance of exploitation in the next 30 days.

The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service (uncontrolled recursion and crash) via a trace level with a wildcard in the Trace Pattern.

Affected products

• SAP NetWeaver: up to and including 7.01; version 7.20 only

Published 2014-11-06. Last modified 2026-06-17.