SAP SE SAP Web Dispatcher
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-28772 | 7.53 ; 7.77 ; 7.81 ; … | By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7. | HIGH 7.5 | 1.4 % | ||
| CVE-2022-28773 | 7.53 ; 7.77 ; 7.81 ; … | Due to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager, the application may crash, leading to denial | HIGH 7.5 | 1.5 % | ||
| CVE-2022-22536 | 7.49 ; 7.53 ; 7.77 ; … | SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher | CRITICAL 10.0 | 98 % | KEV | |
| CVE-2021-38162 | WEBDISP - 7.49 ; 7.53 ; 7.77 ; … | SAP Web Dispatcher versions - 7.49, 7.53, 7.77, 7.81, KRNL64NUC - 7.22, 7.22EXT, 7.49, KRNL64UC -7.22, 7.22EXT, 7.49, 7.53, KERNEL - 7.22, 7 | CRITICAL 9.4 | 2.7 % |