CVE-2006-5784: sap sap_web_application_server
Vulnerability summary
CVE-2006-5784 is a medium (CVSS 4.6) vulnerability in sap sap_web_application_server. EPSS estimates a 2.92% chance of exploitation in the next 30 days, higher than 86.9% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 07-11-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to read arbitrary files via crafted data on a "3200+SYSNR" TCP port, as demonstrated by port 3201. NOTE: this issue can be leveraged by local users to access a named pipe as the SAPServiceJ2E user.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.92%
Chance of exploitation in the next 30 days
Percentile
87%
Versus all other CVEs
30-day change
-0.02 pp
From 2.94% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundSAP Web Application Server 6.40 - Arbitrary File Disclosure
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Sap1 product
- sap_web_application_server6.40 | 7.00
1 vendor · 1 product