CVE-2021-21446: SAP NetWeaver Application Server Abap

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

SAP NetWeaver AS ABAP, versions 740, 750, 751, 752, 753, 754, 755, allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service, this has a high impact on the availability of the service.

Affected products

• SAP NetWeaver Application Server Abap: version 740 only; version 750 only; version 751 only; version 752 only; version 753 only; version 754 only; …

Published 2021-01-12. Last modified 2026-06-17.