CVE-2025-42878
- EPSS 0.06%
- Veröffentlicht 09.12.2025 02:14:59
- Zuletzt bearbeitet 09.12.2025 18:36:53
SAP Web Dispatcher and ICM may expose internal testing interfaces that are not intended for production. If enabled, unauthenticated attackers could exploit them to access diagnostics, send crafted requests, or disrupt services. This vulnerability has...
CVE-2025-42877
- EPSS 0.08%
- Veröffentlicht 09.12.2025 02:14:51
- Zuletzt bearbeitet 09.12.2025 18:36:53
SAP Web Dispatcher, Internet Communication Manager (ICM), and SAP Content Server allow an unauthenticated user to exploit logical errors that lead to a memory corruption vulnerability. This results in high impact on the availability with no impact on...
CVE-2025-0071
- EPSS 0.11%
- Veröffentlicht 11.03.2025 01:15:33
- Zuletzt bearbeitet 11.03.2025 01:15:33
SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confid...
CVE-2021-33683
- EPSS 0.09%
- Veröffentlicht 14.07.2021 12:15:09
- Zuletzt bearbeitet 21.11.2024 06:09:21
SAP Web Dispatcher and Internet Communication Manager (ICM), versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53, 7....
CVE-2007-3615
- EPSS 2.24%
- Veröffentlicht 06.07.2007 19:30:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
Internet Communication Manager (aka ICMAN.exe or ICM) in SAP NetWeaver Application Server 6.x and 7.x, possibly only on Windows, allows remote attackers to cause a denial of service (process crash) via a URI of a certain length that contains a sap-is...