Internet Transaction Server vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

IT

Product

Internet Transaction Server

by Sap · last CVE May 24, 2018

9

CVEs

0

On KEV

6.1

Max CVSS

0

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 0High 0Medium 1Low 0

Severity

All severities9 Critical0 High0 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Internet Transaction Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-11415	6.1	8%	May 24	SAP Internet Transaction Server (ITS) 6200.X.X has Reflected Cross Site Scripting (XSS) via certain wgate URIs Affected: 6.20
CVE-2008-2123	–	2%	May 9	Cross-site scripting (XSS) vulnerability in WGate in SAP Internet Transaction Server (ITS) 6.20 allows remote attackers to inject arbitrary web script or HTML via (1) a "<>"… Affected: 6200.1017.50954.0_build_730827
CVE-2006-5114	–	2%	Oct 3	Multiple cross-site scripting (XSS) vulnerabilities in wgate in SAP Internet Transaction Server (ITS) 6.1 and 6.2 allow remote attackers to inject arbitrary web script or HTML via… Affected: 6.1; 6.2
CVE-2003-1037	–	3%	Apr 15	Format string vulnerability in the WGate component for SAP Internet Transaction Server (ITS) allows remote attackers to execute arbitrary code via a high "trace level." Affected: through 4.6_pl463; through 6.10_pl30; through 6.20_pl7
CVE-2003-1036	–	3%	Apr 15	Multiple buffer overflows in the AGate component for SAP Internet Transaction Server (ITS) allow remote attackers to execute arbitrary code via long (1) ~command, (2)… Affected: through 4.6_pl463; through 6.10_pl30; through 6.20_pl7
CVE-2003-1038	–	1%	Apr 15	The AGate component for SAP Internet Transaction Server (ITS) allows remote attackers to obtain sensitive information via a ~command parameter with an AgateInstallCheck value,… Affected: through 4.6_pl463; through 6.10_pl30; through 6.20_pl7
CVE-2003-0747	–	3%	Oct 20	wgate.dll in SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory structure and operating… Affected: 4620.2.0.323011
CVE-2003-0749	–	4%	Oct 20	Cross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to insert arbitrary web script and steal… Affected: 4620.2.0.323011
CVE-2003-0748	–	8%	Oct 20	Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to read arbitrary files via ..\ (dot-dot… Affected: 4620.2.0.323011