CVE-2003-1036: SAP Internet Transaction Server

High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days.

Multiple buffer overflows in the AGate component for SAP Internet Transaction Server (ITS) allow remote attackers to execute arbitrary code via long (1) ~command, (2) ~runtimemode, or (3) ~session parameters, or (4) a long HTTP Content-Type header.

Affected products

• SAP Internet Transaction Server: up to and including 4.6_pl463; up to and including 6.10_pl30; up to and including 6.20_pl7

Published 2004-04-15. Last modified 2026-06-16.