SAP NetWeaver JMS Service Deserialization Vulnerability Leading to Denial-of-Service

A deserialization vulnerability has been identified in the JMS service of SAP NetWeaver. This issue allows an authenticated administrator with local access to send specially crafted content to the server. If the application processes this content, it could disrupt internal logic execution, potentially causing a denial-of-service condition. While this vulnerability significantly impacts availability, it does not affect confidentiality or integrity.

Impact

Exploitation of this vulnerability could lead to a denial-of-service condition, causing significant disruption to service availability.

Remediation

Security fixes for this vulnerability will be included in the SAP Security Patch Day, scheduled for the second Tuesday of each month. For details on how to access and implement these security notes, refer to the SAP Security Notes FAQ.