Internet Transaction Server
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:internet_transaction_server:4620.2.0.323011:*:*:*:*:*:*:*
part: a version: 4620.2.0.323011 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Internet Transaction Server (41a57ede-ce80-534c-a1ea-9d5814b3a6ae) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2003-0749 |
vulnerable | 2026-06-08 04:47:22.403326 |
Details available
Cross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to insert arbitrary web script and steal cookies via the ~service parameter.
Published: 2003-09-06T04:00:00.000Z
Updated: 2024-08-08T02:05:12.366Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0748 |
vulnerable | 2026-06-08 04:47:22.403042 |
Details available
Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the ~theme parameter and a ~template parameter with a filename followed by space characters, which can prevent SAP from effectively adding a .html extension to the filename.
Published: 2003-09-06T04:00:00.000Z
Updated: 2024-08-08T02:05:12.549Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0747 |
vulnerable | 2026-06-08 04:47:22.402692 |
Details available
wgate.dll in SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory structure and operating system via incorrect parameters (1) ~service, (2) ~templatelanguage, (3) ~language, (4) ~theme, or (5) ~template, which leaks the information in the resulting error message.
Published: 2003-09-06T04:00:00.000Z
Updated: 2024-08-08T02:05:12.542Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.