CVE-2006-5114: SAP Internet Transaction Server

Medium severity, CVSS 6.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in wgate in SAP Internet Transaction Server (ITS) 6.1 and 6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) ~urlmime or (2) ~command parameter, different vectors than CVE-2003-0749.

Affected products

• SAP Internet Transaction Server: version 6.1 only; version 6.2 only

Published 2006-10-03. Last modified 2026-06-16.