{"schemaVersion":3,"id":"CVE-2021-38162","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"SAP Web Dispatcher versions - 7.49, 7.53, 7.77, 7.81, KRNL64NUC - 7.22, 7.22EXT, 7.49, KRNL64UC -7.22, 7.22EXT, 7.49, 7.53, KERNEL - 7.22, 7.49, 7.53, 7.77, 7.81, 7.83 processes allow an unauthenticated attacker to submit a malicious crafted request over a network to a front-end server which may, over several attempts, result in a back-end server confusing the boundaries of malicious and legitimate messages. This can result in the back-end server executing a malicious payload which can be used to read or modify any information on the server or consume server resources making it temporarily unavailable.","dates":{"published":"2021-09-14T11:15:37.000Z","modified":"2024-08-04T01:37:15.668Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.4,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.9,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.4,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.5,"severity":"high","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.02739,"percentile":0.86046,"severity":"low","asOf":"2026-10-22T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-22T00:00:00.000Z","baselineScore":0.02739},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-22T00:00:00.000Z","score":0.02739,"percentile":0.86046}],"last30":[{"date":"2026-09-22T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.02739,"percentile":null},{"date":"2026-10-22T00:00:00.000Z","score":0.02739,"percentile":0.86046}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_9F4BB38348979F98","name":"Exploit Reference (seclists.org)","source":"reference","url":"http://seclists.org/fulldisclosure/2022/May/3","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_D52BAF0C284B4CC3","name":"Exploit Reference (packetstormsecurity.com)","source":"reference","url":"http://packetstormsecurity.com/files/166964/SAP-Web-Dispatcher-HTTP-Request-Smuggling.html","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":2,"weaknesses":[{"id":"CWE-444","name":"Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')","description":"The product acts as an intermediary HTTP agent\n         (such as a proxy or firewall) in the data flow between two\n         entities such as a client and server, but it does not\n         interpret malformed HTTP requests or responses in ways that\n         are consistent with how the messages will be processed by\n         those entities that are at the ultimate destination.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/444.html"}],"affected":[{"vendor":"sap_se","product":"sap web dispatcher","name":"SAP Web Dispatcher","label":"sap web dispatcher","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"WEBDISP - 7.49","noFixRecorded":false,"fixedIn":null},{"text":"7.53","noFixRecorded":false,"fixedIn":null},{"text":"7.77","noFixRecorded":false,"fixedIn":null},{"text":"7.81","noFixRecorded":false,"fixedIn":null},{"text":"KRNL64NUC - 7.22","noFixRecorded":false,"fixedIn":null},{"text":"7.22EXT","noFixRecorded":false,"fixedIn":null},{"text":"7.49","noFixRecorded":false,"fixedIn":null},{"text":"KRNL64UC -7.22","noFixRecorded":false,"fixedIn":null},{"text":"KERNEL - 7.22","noFixRecorded":false,"fixedIn":null},{"text":"7.83","noFixRecorded":false,"fixedIn":null}],"versionsText":"WEBDISP - 7.49 | 7.53 | 7.77 | 7.81 | KRNL64NUC - 7.22 | 7.22EXT | 7.49 | KRNL64UC -7.22 | KERNEL - 7.22 | 7.83","eol":null,"hubHref":"/vendor/sap_se/sap_web_dispatcher"},{"vendor":"sap","product":"web_dispatcher","name":"web dispatcher","label":"web_dispatcher","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"7.22ext","noFixRecorded":false,"fixedIn":null},{"text":"7.49","noFixRecorded":false,"fixedIn":null},{"text":"7.53","noFixRecorded":false,"fixedIn":null},{"text":"7.77","noFixRecorded":false,"fixedIn":null},{"text":"7.81","noFixRecorded":false,"fixedIn":null},{"text":"7.83","noFixRecorded":false,"fixedIn":null},{"text":"kernel_7.22","noFixRecorded":false,"fixedIn":null},{"text":"krnl64nuc_7.22","noFixRecorded":false,"fixedIn":null},{"text":"krnl64uc_7.22","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.22ext | 7.49 | 7.53 | 7.77 | 7.81 | 7.83 | kernel_7.22 | krnl64nuc_7.22 | krnl64uc_7.22","eol":null,"hubHref":"/vendor/sap/web_dispatcher"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405","label":"wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405","hostname":"wiki.scn.sap.com","tags":["X Refsource MISC","Vendor Advisory"]},{"url":"https://launchpad.support.sap.com/#/notes/3080567","label":"launchpad.support.sap.com","hostname":"launchpad.support.sap.com","tags":["X Refsource MISC","Permissions Required"]},{"url":"http://seclists.org/fulldisclosure/2022/May/3","label":"seclists.org/fulldisclosure/2022/May/3","hostname":"seclists.org","tags":["Mailing List","X Refsource FULLDISC","Exploit","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/166964/SAP-Web-Dispatcher-HTTP-Request-Smuggling.html","label":"packetstormsecurity.com/files/166964/SAP-Web-Dispatcher-HTTP-Request-Smuggling.html","hostname":"packetstormsecurity.com","tags":["X Refsource MISC","Exploit","Third Party Advisory","VDB Entry"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2021-09-14T11:15:37.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-04T01:37:15.668Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T19:42:35.202Z","stale":false,"partial":false}}