SAP SE SAP Netweaver (Internet Communication Manager) vulnerabilities

3 vulnerabilities

Known vulnerabilities in SAP SE SAP Netweaver (Internet Communication Manager), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2022-28772sap_sesap netweaver (internet communication manager)+3
EPSS score
1.44%
By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.85, 7.86, or Internet Communication Manager - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, which makes these programs unavailable, leading to denial of service.7.5CVE-2022-28773sap_sesap netweaver (internet communication manager)+3
EPSS score
1.48%
Due to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager, the application may crash, leading to denial of service, but can be restarted automatically.7.5CVE-2024-22124sap_sesap netweaver (internet communication manager)+1
EPSS score
0.33%
Under certain conditions, Internet Communication Manager (ICM) or SAP Web Dispatcher - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22_EXT, WEBDISP 7.22_EXT, WEBDISP 7.53, WEBDISP 7.54, could allow an attacker to access information which would otherwise be restricted causing high impact on confidentiality.