{"cve":{"cve_id":"CVE-2024-34688","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.00541,"epss_percentile":0.4119,"epss_as_of":"2026-06-23","description":"Due to unrestricted access to the Meta Model\nRepository services in SAP NetWeaver AS Java, attackers can perform DoS attacks\non the application, which may prevent legitimate users from accessing it. This\ncan result in no impact on confidentiality and integrity but a high impact on\nthe availability of the application.","published_at":"2024-06-11T02:02:21.587000Z","last_modified_at":null,"cvss_v3_score":7.5,"cvss_v3_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_v3_severity":"HIGH","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":"none","ssvc_automatable":true,"ssvc_technical_impact":"partial","cwes":["CWE-400"],"nvd_references":["https://me.sap.com/notes/3460407","https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html"],"vuln_status":null,"trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-06-29T02:00:20.813544Z"},"effective_severity":"HIGH","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"N","value_label":"None"},{"metric":"I","name":"Integrity","value":"N","value_label":"None"},{"metric":"A","name":"Availability","value":"H","value_label":"High"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"sap-se","vendor_name":"SAP_SE","product_slug":"sap-netweaver-as-java","product_name":"SAP NetWeaver AS JAVA","version_start":"MMR_SERVER 7.5","version_start_inclusive":true,"version_end":"MMR_SERVER 7.5","version_end_inclusive":true,"cpe23_uri":"cve5:sap-se:sap-netweaver-as-java:MMR_SERVER 7.5:MMR_SERVER 7.5"}],"exploit_refs":[],"news":[],"references":[{"url":"https://me.sap.com/notes/3460407","source_type":"MISC","tags":[]},{"url":"https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html","source_type":"MISC","tags":[]}],"timeline":[{"type":"published","at":"2024-06-11T02:02:21.587000Z","label":"CVE published","source":null},{"type":"cvss_changed","at":"2026-06-28T17:35:56.094721Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:35:56.094721Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:35:56.094721Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"ssvc_changed","at":"2026-06-29T02:00:20.813544Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-29T02:00:20.813544Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-29T02:00:20.813544Z","label":"SSVC decision revised","source":"vulnrichment"}]}