- Description
- SAP Web Dispatcher versions - 7.49, 7.53, 7.77, 7.81, KRNL64NUC - 7.22, 7.22EXT, 7.49, KRNL64UC -7.22, 7.22EXT, 7.49, 7.53, KERNEL - 7.22, 7.49, 7.53, 7.77, 7.81, 7.83 processes allow an unauthenticated attacker to submit a malicious crafted request over a network to a front-end server which may, over several attempts, result in a back-end server confusing the boundaries of malicious and legitimate messages. This can result in the back-end server executing a malicious payload which can be used to read or modify any information on the server or consume server resources making it temporarily unavailable.
- Source
- cna@sap.com
- NVD status
- Modified
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sap:web_dispatcher:7.22ext:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3F76E6A-2F27-450C-AAB5-E49A64079CAC"
},
{
"criteria": "cpe:2.3:a:sap:web_dispatcher:7.49:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0B4A7850-377C-4463-A5D7-07F516FBD74A"
},
{
"criteria": "cpe:2.3:a:sap:web_dispatcher:7.53:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47D4D542-2EC2-490B-B4E9-3E7BB8D59B77"
},
{
"criteria": "cpe:2.3:a:sap:web_dispatcher:7.77:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E33D9481-3CF6-4AA3-B115-7903AC6DAE25"
},
{
"criteria": "cpe:2.3:a:sap:web_dispatcher:7.81:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49FF2A5B-E5F0-4991-9AA3-7CB3B8C62941"
},
{
"criteria": "cpe:2.3:a:sap:web_dispatcher:7.83:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65F95ED3-AE34-43A2-AD57-8E0913DDF1D4"
},
{
"criteria": "cpe:2.3:a:sap:web_dispatcher:kernel_7.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2E1A535-8362-454E-AC22-85C4E957CCF5"
},
{
"criteria": "cpe:2.3:a:sap:web_dispatcher:krnl64nuc_7.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3CA8BFCF-0A55-4DEE-B426-1DEF04DA0464"
},
{
"criteria": "cpe:2.3:a:sap:web_dispatcher:krnl64uc_7.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52C58E1D-8A91-451C-A1E1-85BE336DC763"
}
],
"operator": "OR"
}
]
}
]