CVE-2006-6010: SAP Web Application Server

Medium severity, CVSS 5.0. EPSS: 13.9% chance of exploitation in the next 30 days.

SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an RFC_SYSTEM_INFO RfcCallReceive request, a different vulnerability than CVE-2003-0747.

Affected products

• SAP SAP Web Application Server: any version

Published 2006-11-21. Last modified 2026-06-16.