SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6,
SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a…
| Vendor | Product | Versions |
|---|---|---|
| SAP SE | SAP Kernel (KRNL32NUC) | < 7.21, < 7.21EXT, < 7.22, < 7.22EXT |
| SAP SE | SAP Kernel (KRNL32UC) | < 7.21, < 7.21EXT, < 7.22, < 7.22EXT |
| SAP SE | SAP Kernel (KRNL64NUC) | < 7.21, < 7.21EXT, < 7.22, < 7.22EXT, < 7.49 |
| SAP SE | SAP Kernel (KRNL64UC) | < 7.21, < 7.21EXT, < 7.22, < 7.22EXT, < 7.49, < 7.73 |
| SAP SE | SAP Kernel (KERNEL) | < 7.21, < 7.49, < 7.53, < 7.73, < 7.76 |
| SAP SE | SAP GUI for Windows (BC | FES-GUI) — < 7.5, < 7.6 |
| SAP SE | SAP GUI for Java (BC | FES-JAV) — < 7.5 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.