Internet Transaction Server (Sap) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2018-05-24. Vendor: Sap.
CVEs of Internet Transaction Server
- CVE-2018-11415 - CVSS 6.1 (medium), 2018-05-24: SAP Internet Transaction Server (ITS) 6200.X.X has Reflected Cross Site Scripting (XSS) via certain wgate URIs. NOTE: the vendor has reportedly indicated that…
- CVE-2008-2123 - CVSS 4.3 (medium), 2008-05-09: Cross-site scripting (XSS) vulnerability in WGate in SAP Internet Transaction Server (ITS) 6.20 allows remote attackers to inject arbitrary web script or HTML…
- CVE-2006-5114 - CVSS 6.8 (medium), 2006-10-03: Multiple cross-site scripting (XSS) vulnerabilities in wgate in SAP Internet Transaction Server (ITS) 6.1 and 6.2 allow remote attackers to inject arbitrary…
- CVE-2003-1038 - CVSS 5 (medium), 2004-04-15: The AGate component for SAP Internet Transaction Server (ITS) allows remote attackers to obtain sensitive information via a ~command parameter with an…
- CVE-2003-1037 - CVSS 7.5 (high), 2004-04-15: Format string vulnerability in the WGate component for SAP Internet Transaction Server (ITS) allows remote attackers to execute arbitrary code via a high…
- CVE-2003-1036 - CVSS 7.5 (high), 2004-04-15: Multiple buffer overflows in the AGate component for SAP Internet Transaction Server (ITS) allow remote attackers to execute arbitrary code via long (1)…
- CVE-2003-0749 - CVSS 6.8 (medium), 2003-10-20: Cross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to insert arbitrary…
- CVE-2003-0748 - CVSS 5 (medium), 2003-10-20: Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to read arbitrary files via…
- CVE-2003-0747 - CVSS 5 (medium), 2003-10-20: wgate.dll in SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory…
