SAP NetWeaver (Internet Communication Manager) vulnerabilities

3 known vulnerabilities in SAP NetWeaver (Internet Communication Manager) from SAP. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  SAP NetWeaver (Internet Communication Manager): Exposure of Sensitive System Information to an Unauthorized Control Sphere

  CVE-2024-22124Jan 9, 2024SAP

  Under certain conditions, Internet Communication Manager (ICM) or SAP Web Dispatcher - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22_EXT, WEBDISP 7.22_EXT, WEBDISP 7.53, WEBDISP 7

• 7.5 High severity

  SAP NetWeaver (Internet Communication Manager): Uncontrolled Recursion

  CVE-2022-28773Apr 12, 2022SAPEPSS 1.48%

  Due to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager, the application may crash, leading to denial of service, but can be restarted automatically.

• 7.5 High severity

  SAP NetWeaver (Internet Communication Manager): Out-of-bounds Write

  CVE-2022-28772Apr 12, 2022SAPEPSS 1.44%

  By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.85, 7.86, or Internet Communication Manager - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53