CVE-2021-33670

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS for Java versions 7.10 through 7.50

Description: The issue allows an attacker to send multiple HTTP requests with different method types, thereby crashing the filter and making the HTTP server unavailable to other legitimate users, leading to a denial of service.

Recommendations: For versions 7.10 through 7.50, consider restricting access to the HTTP service to minimize the risk of exploitation until a patch is available. As a temporary workaround, consider disabling the Http Service Monitoring Filter until a patch is available.