Vulnerability Details CVE-2017-5997
The SAP Message Server HTTP daemon in SAP KERNEL 7.21-7.49 allows remote attackers to cause a denial of service (memory consumption and process crash) via multiple msgserver/group?group= requests with a crafted size of the group parameter, aka SAP Security Note 2358972.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.8%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2017-5997
-
cpe:2.3:a:sap:sap_kernel:7.21
-
cpe:2.3:a:sap:sap_kernel:7.22
-
cpe:2.3:a:sap:sap_kernel:7.42