SAP

Webdispatcher

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2026-76968

  • EPSS 0.23%
  • Veröffentlicht 08.09.2026 01:17:55
  • Zuletzt bearbeitet 08.09.2026 19:12:59

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting i...

8.2

CVE-2025-42878

Medienbericht
  • EPSS 0.35%
  • Veröffentlicht 09.12.2025 02:14:59
  • Zuletzt bearbeitet 07.10.2026 20:10:01

SAP Web Dispatcher and ICM may expose internal testing interfaces that are not intended for production. If enabled, unauthenticated attackers could exploit them to access diagnostics, send crafted requests, or disrupt services. This vulnerability has...

7.5

CVE-2025-42877

Medienbericht
  • EPSS 0.53%
  • Veröffentlicht 09.12.2025 02:14:51
  • Zuletzt bearbeitet 07.10.2026 20:10:01

SAP Web Dispatcher, Internet Communication Manager (ICM), and SAP Content Server allow an unauthenticated user to exploit logical errors that lead to a memory corruption vulnerability. This results in high impact on the availability with no impact on...

4.9

CVE-2025-0071

  • EPSS 0.37%
  • Veröffentlicht 11.03.2025 01:15:33
  • Zuletzt bearbeitet 15.04.2026 00:35:42

SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confid...

6.1

CVE-2022-27656

  • EPSS 0.55%
  • Veröffentlicht 11.05.2022 15:15:09
  • Zuletzt bearbeitet 21.11.2024 06:56:06

The Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.