SAP Web Dispatcher and Internet Communication Manager vulnerabilities

2 known vulnerabilities in SAP Web Dispatcher and Internet Communication Manager from SAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  SAP Web Dispatcher and Internet Communication…: Cross-Site Request Forgery

  CVE-2026-89119Nov 10, 2026SAP

  SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) do not perform sufficient request validation in certain administrative functionality. In the context of Application Server ABAP and SAP Web Dispatcher, an unauthentic

• 7.6 High severity

  SAP Web Dispatcher and Internet Communication…: Cross-Site Request Forgery

  CVE-2026-120014Nov 10, 2026SAP

  SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain administrative functionality. In the context of SAP HANA XSA Web Dispatcher, an unauthenticated attacker could trick a logged-on administrator into visiting a malicious link.