CVE-2003-1038: SAP Internet Transaction Server

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

The AGate component for SAP Internet Transaction Server (ITS) allows remote attackers to obtain sensitive information via a ~command parameter with an AgateInstallCheck value, which provides a list of installed DLLs and full pathnames.

Affected products

• SAP Internet Transaction Server: up to and including 4.6_pl463; up to and including 6.10_pl30; up to and including 6.20_pl7

Published 2004-04-15. Last modified 2026-06-16.