Web Dispatcher vulnerabilities | LiveThreat CVE Feed

Product

Web Dispatcher

by Sap · last CVE Aug 13, 2024

On CISA KEVExploited in the wild

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 5High 3Medium 3Low 0

Severity

All severities11 Critical5 High3 Medium3 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Web Dispatcher to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-22536 In wildKEV	10.0	98%	Feb 9	SAP Multiple Products HTTP Request Smuggling Vulnerability Affected: 7.22ext; 7.49; 7.53; 7.77; 7.81; 7.85; +2 more
CVE-2023-40309	9.8	1%	Sep 12	SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation… Affected: 7.22ext; 7.53; 7.54; 7.77; 7.85; 7.89
CVE-2023-35871	9.4	1%	Jul 11	The SAP Web Dispatcher - versions WEBDISP 7.53, WEBDISP 7.54, WEBDISP 7.77, WEBDISP 7.85, WEBDISP 7.89, WEBDISP 7.91, WEBDISP 7.92, WEBDISP 7.93, KERNEL 7.53, KERNEL 7.54 KERNEL… Affected: 7.53; 7.54; 7.77; 7.85; 7.89; 7.91; +14 more
CVE-2023-33987	9.4	1%	Jul 11	An unauthenticated attacker in SAP Web Dispatcher - versions WEBDISP 7.49, WEBDISP 7.53, WEBDISP 7.54, WEBDISP 7.77, WEBDISP 7.81, WEBDISP 7.85, WEBDISP 7.88, WEBDISP 7.89,… Affected: 7.49; 7.53; 7.54; 7.77; 7.81; 7.85; +18 more
CVE-2021-38162	9.4	3%	Sep 14	SAP Web Dispatcher versions - 7.49, 7.53, 7.77, 7.81, KRNL64NUC - 7.22, 7.22EXT, 7.49, KRNL64UC -7.22, 7.22EXT, 7.49, 7.53, KERNEL - 7.22, 7.49, 7.53, 7.77, 7.81, 7.83 processes… Affected: 7.22ext; 7.49; 7.53; 7.77; 7.81; 7.83; +3 more
CVE-2023-40308	7.5	1%	Sep 12	SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes… Affected: 7.22ext; 7.53; 7.54; 7.77; 7.85; 7.89
CVE-2022-28773	7.5	1%	Apr 12	Due to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager, the application may crash, leading to denial of service, but can be restarted… Affected: 7.53; 7.77; 7.81; 7.85; 7.86
CVE-2022-28772	7.5	1%	Apr 12	By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.85, 7.86, or Internet Communication… Affected: 7.53; 7.77; 7.81; 7.85; 7.86
CVE-2024-33005	6.3	0%	Aug 13	Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server (ABAP and Java), and SAP Content Server can… Affected: kernel_7.22; kernel_7.53; kernel_7.54; kernel_7.77; kernel_7.85; kernel_7.89; +13 more
CVE-2023-29108	5.3	0%	Apr 11	The IP filter in ABAP Platform and SAP Web Dispatcher - versions WEBDISP 7.85, 7.89, KERNEL 7.85, 7.89, 7.91, may be vulnerable by erroneous IP netmask handling Affected: 7.85; 7.89
CVE-2021-33683	4.3	1%	Jul 14	SAP Web Dispatcher and Internet Communication Manager (ICM), versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT,… Affected: 7.8_kernel_7.21; 7.21ext; 7.22; 7.22ext; 7.49; 7.53; +9 more