CyberRota Analysis
AI-GeneratedSAP S/4HANA (Private Cloud) is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to a flaw in a third-party component, allowing unauthenticated attackers to send crafted inputs that can overwhelm system resources. This could lead to service unavailability, significantly impacting operational continuity. Organizations using this version of SAP S/4HANA should prioritize remediation to mitigate potential disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SAP S/4HANA (Private Cloud) uses a third-party component that contains a Regular Expression Denial of Service (ReDoS) vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could exhaust system resources and make the service unavailable, resulting in a high impact on availability. There is no impact on confidentiality and integrity.