CVE-2021-40495: SAP NetWeaver Abap

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755. An unauthorized attacker can use the public SICF service /sap/public/bc/abap to reduce the performance of SAP NetWeaver Application Server ABAP and ABAP Platform.

Affected products

• SAP NetWeaver Abap: version 740 only; version 750 only; version 751 only; version 752 only; version 753 only; version 754 only; …
• SAP NetWeaver Application Server Abap: version 740 only; version 750 only; version 751 only; version 752 only; version 753 only; version 754 only; …

Published 2021-10-12. Last modified 2026-06-17.