The Host Control web service in SAP NetWeaver AS JAVA 7.0 through 7.5 allows remote attackers to cause a denial of service (service crash) via a crafted request, aka SAP Security Note 2389181.
https://erpscan.io/advisories/erpscan-17-030-sap-hostcontrol-remote-dos/