CVE-2017-9843: SAP NetWeaver AS ABAP 7.40 allows remote authenticated users with certain privileges to cause a denial of s...

Security readout for executives and security teams

This CVE concerns SAP NetWeaver AS ABAP 7.40. A remotely authenticated user with certain privileges could crash a SAP work process, causing denial of service. The source bundle does not show data theft, unauthenticated access, or active exploitation. Exposure is most likely in SAP NetWeaver AS ABAP 7.40 environments where privileged authenticated users can access relevant ABAP functionality. Public internet exposure is not established by the sources; access control and privileged account governance are central. Treat as a targeted availability risk for SAP environments. Prioritize validation if SAP NetWeaver AS ABAP 7.40 supports business-critical processes, especially where many privileged users or weak access controls exist. Mitigation focus: Check SAP Security Note 2406841 and apply vendor guidance where applicable.; Inventory SAP NetWeaver AS ABAP 7.40 systems and ownership.; Restrict privileged ABAP access to approved administrators only..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.