{"id":"CVE-2024-34688","aliases":["EUVD-2024-34987","GHSA-6qmc-84fw-65c9"],"status":"published","title":"Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository)","description":"Due to unrestricted access to the Meta Model\nRepository services in SAP NetWeaver AS Java, attackers can perform DoS attacks\non the application, which may prevent legitimate users from accessing it. This\ncan result in no impact on confidentiality and integrity but a high impact on\nthe availability of the application.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00541,"percentile":0.45817,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-400"],"published":"2024-06-11T02:02:21Z","modified":"2026-06-17T07:33:52Z","products":[{"vendor":"sap","product":"netweaver"},{"vendor":"sap","product":"netweaver_application_server_java"},{"vendor":"sap_se","product":"sap netweaver as java"}],"references":[{"url":"https://me.sap.com/notes/3460407","tags":["x_transferred","Permissions Required"]},{"url":"https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html","tags":["x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34688"},{"url":"https://support.sap.com/en/my-support/knowledge-base/security-notes-news.htmlhttps://support.sap.com/en/my-support/knowledge-base/security-notes-news.html"},{"url":"https://github.com/advisories/GHSA-6qmc-84fw-65c9"}],"sources":{"cve":[{"id":"CVE-2024-34688","title":"Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository)","description":"Due to unrestricted access to the Meta Model\nRepository services in SAP NetWeaver AS Java, attackers can perform DoS attacks\non the application, which may prevent legitimate users from accessing it. This\ncan result in no impact on confidentiality and integrity but a high impact on\nthe availability of the application.","status":"published","published":"2024-06-11T02:02:21.587Z","modified":"2024-08-02T02:59:22.017Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:34:23.193864Z"}],"euvd":[{"id":"EUVD-2024-34987","description":"Due to unrestricted access to the Meta Model\nRepository services in SAP NetWeaver AS Java, attackers can perform DoS attacks\non the application, which may prevent legitimate users from accessing it. This\ncan result in no impact on confidentiality and integrity but a high impact on\nthe availability of the application.","status":"published","published":"2024-06-11T02:02:21Z","modified":"2024-08-02T02:59:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T03:50:20.898281Z"}],"ghsa":[{"id":"GHSA-6qmc-84fw-65c9","title":"Due to unrestricted access to the Meta Model\nRepository services in SAP NetWeaver AS Java,...","description":"Due to unrestricted access to the Meta Model\nRepository services in SAP NetWeaver AS Java, attackers can perform DoS attacks\non the application, which may prevent legitimate users from accessing it. This\ncan result in no impact on confidentiality and integrity but a high impact on\nthe availability of the application.","status":"published","published":"2024-06-11T03:31:01Z","modified":"2024-06-11T12:32:08Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:57:27.679011Z"}],"nvd":[{"id":"CVE-2024-34688","description":"Due to unrestricted access to the Meta Model\nRepository services in SAP NetWeaver AS Java, attackers can perform DoS attacks\non the application, which may prevent legitimate users from accessing it. This\ncan result in no impact on confidentiality and integrity but a high impact on\nthe availability of the application.","status":"published","published":"2024-06-11T03:15:11.31Z","modified":"2026-06-17T07:33:52.847Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:10:04.804473Z"}]}}