Sap Web Dispatcher (Sap Se) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 20 known versions, newest CVE from 2026-09-08. Vendor: Sap Se.
CVEs of Sap Web Dispatcher
- CVE-2026-76968 - CVSS 6.5 (medium), 2026-09-08: SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative…
- CVE-2025-42877 - CVSS 7.5 (high), 2025-12-09: SAP Web Dispatcher, Internet Communication Manager (ICM), and SAP Content Server allow an unauthenticated user to exploit logical errors that lead to a memory…
- CVE-2024-47590 - CVSS 8.8 (high), 2024-11-12: An unauthenticated attacker can create a malicious link which they can make publicly available. When an authenticated victim clicks on this malicious link,…
- CVE-2023-40309 - CVSS 9.8 (critical), 2023-09-12: SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user,…
- CVE-2023-40308 - CVSS 7.5 (high), 2023-09-12: SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library…
- CVE-2023-35871 - CVSS 9.4 (critical), 2023-07-11: The SAP Web Dispatcher - versions WEBDISP 7.53, WEBDISP 7.54, WEBDISP 7.77, WEBDISP 7.85, WEBDISP 7.89, WEBDISP 7.91, WEBDISP 7.92, WEBDISP 7.93, KERNEL 7.53,…
- CVE-2023-33987 - CVSS 9.4 (critical), 2023-07-11: An unauthenticated attacker in SAP Web Dispatcher - versions WEBDISP 7.49, WEBDISP 7.53, WEBDISP 7.54, WEBDISP 7.77, WEBDISP 7.81, WEBDISP 7.85, WEBDISP 7.88,…
- CVE-2022-28772 - CVSS 7.5 (high), 2022-04-12: By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.85, 7.86, or…
- CVE-2022-28773 - CVSS 7.5 (high), 2022-04-12: Due to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager, the application may crash, leading to denial of service, but…
- CVE-2022-22536 - CVSS 10 (critical), 2022-02-09: SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for…
- CVE-2021-38162 - CVSS 9.4 (critical), 2021-09-14: SAP Web Dispatcher versions - 7.49, 7.53, 7.77, 7.81, KRNL64NUC - 7.22, 7.22EXT, 7.49, KRNL64UC -7.22, 7.22EXT, 7.49, 7.53, KERNEL - 7.22, 7.49, 7.53, 7.77,…
