SAP Web Dispatcher vulnerabilities

12 CVEs affecting SAP Web Dispatcher, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-47590, published 2024-11-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-22536: SAP Multiple Products HTTP Request Smuggling Vulnerability, published 2022-02-09. Critical severity, CVSS 10.0. Actively exploited: in CISA KEV since 2022-08-18. EPSS: 97.9% chance of exploitation in the next 30 days. SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request…
CVE-2021-38162, published 2021-09-14. Critical severity, CVSS 9.4. EPSS: 2.7% chance of exploitation in the next 30 days. SAP Web Dispatcher versions - 7.49, 7.53, 7.77, 7.81, KRNL64NUC - 7.22, 7.22EXT, 7.49, KRNL64UC -7.22, 7.22EXT, 7.49, 7.53, KERNEL - 7.22, 7.49, 7.53, 7.77, 7.81, 7.83 processes allow an…
CVE-2022-28773, published 2022-04-12. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Due to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager, the application may crash, leading to denial of service, but can be restarted automatically.
CVE-2022-28772, published 2022-04-12. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.85, 7.86, or Internet Communication Manager - versions…
CVE-2023-40309, published 2023-09-12. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation of privileges.…
CVE-2024-47590, published 2024-11-12. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. An unauthenticated attacker can create a malicious link which they can make publicly available. When an authenticated victim clicks on this malicious link, input data will be used by the web site…
CVE-2023-40308, published 2023-09-12. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes the target component…
CVE-2023-33987, published 2023-07-11. Critical severity, CVSS 9.4. EPSS: 0.7% chance of exploitation in the next 30 days. An unauthenticated attacker in SAP Web Dispatcher - versions WEBDISP 7.49, WEBDISP 7.53, WEBDISP 7.54, WEBDISP 7.77, WEBDISP 7.81, WEBDISP 7.85, WEBDISP 7.88, WEBDISP 7.89, WEBDISP 7.90, KERNEL 7.49,…
CVE-2023-35871, published 2023-07-11. Critical severity, CVSS 9.4. EPSS: 0.6% chance of exploitation in the next 30 days. The SAP Web Dispatcher - versions WEBDISP 7.53, WEBDISP 7.54, WEBDISP 7.77, WEBDISP 7.85, WEBDISP 7.89, WEBDISP 7.91, WEBDISP 7.92, WEBDISP 7.93, KERNEL 7.53, KERNEL 7.54 KERNEL 7.77, KERNEL 7.85,…
CVE-2021-33683, published 2021-07-14. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. SAP Web Dispatcher and Internet Communication Manager (ICM), versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49,…

Latest

CVE-2024-33005, published 2024-08-13. Medium severity, CVSS 6.3. EPSS: 0.2% chance of exploitation in the next 30 days. Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server (ABAP and Java), and SAP Content Server can impersonate other…
CVE-2023-29108, published 2023-04-11. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. The IP filter in ABAP Platform and SAP Web Dispatcher - versions WEBDISP 7.85, 7.89, KERNEL 7.85, 7.89, 7.91, may be vulnerable by erroneous IP netmask handling. This may enable access to backend…