CVE-2014-6252: SAP NetWeaver

Medium severity, CVSS 6.5. EPSS: 2.4% chance of exploitation in the next 30 days.

Buffer overflow in disp+work.exe 7000.52.12.34966 and 7200.117.19.50294 in the Dispatcher in SAP NetWeaver 7.00 and 7.20 allows remote authenticated users to cause a denial of service or execute arbitrary code via unspecified vectors.

Affected products

• SAP NetWeaver: version 7.0 only; version 7.20 only

Published 2014-09-05. Last modified 2026-06-17.