Advisories · Technology
SAP_SE SAP Web Dispatcher.
Every CVE that names SAP_SE SAP Web Dispatcher among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Cross-Site Scripting (XSS) vulnerability in SAP Web Dispatcher
- SAP_SE SAP Web Dispatcher
- CWE-791
- CVSS 9.8 CriticalCritical · CVSS 9+
Missing Authorization check in SAP CommonCryptoLib
- SAP_SE SAP CommonCryptoLib
- SAP_SE SAP NetWeaver AS ABAP, SAP NetWeaver AS Java and ABAP Platform of S/4HANA on-premise
- Broken access control
- CVSS 7.5 High
Memory Corruption vulnerability in SAP CommonCryptoLib
- SAP_SE SAP CommonCryptoLib
- SAP_SE SAP NetWeaver AS ABAP, SAP NetWeaver AS Java and ABAP Platform of S/4HANA on-premise
- Memory corruption
- CVSS 7.7 High
Memory Corruption vulnerability in SAP Web Dispatcher
- SAP_SE SAP Web Dispatcher
- Memory corruption
- CVSS 8.6 High
Request smuggling and request concatenation in SAP Web Dispatcher
- SAP_SE SAP Web Dispatcher
- HTTP request smuggling
-
Stack-based buffer overflow in SAP SE SAP NetWeaver (Internet Communication Manager) and others
- SAP SE SAP NetWeaver (Internet Communication Manager)
- SAP SE SAP Web Dispatcher
- Memory corruption
-
Uncontrolled recursion in SAP SE SAP NetWeaver (Internet Communication Manager) and others
- SAP SE SAP NetWeaver (Internet Communication Manager)
- SAP SE SAP Web Dispatcher
- Denial of service
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
HTTP request smuggling in SAP SE SAP NetWeaver and ABAP Platform and others
- SAP SE SAP NetWeaver and ABAP Platform
- SAP SE SAP Web Dispatcher
- HTTP request smuggling
- CVSS 8.9 High
HTTP request smuggling in SAP SE SAP Web Dispatcher
- SAP SE SAP Web Dispatcher
- HTTP request smuggling