Sap Web Application Server
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:sap_web_application_server:6.40:*:*:*:*:*:*:*
part: a version: 6.40 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Sap Web Application Server (bf43f798-e5de-5fd0-ab8d-8ae3a986cece) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-3615 |
vulnerable | 2026-06-08 04:49:54.339610 |
Details available
Internet Communication Manager (aka ICMAN.exe or ICM) in SAP NetWeaver Application Server 6.x and 7.x, possibly only on Windows, allows remote attackers to cause a denial of service (process crash) via a URI of a certain length that contains a sap-isc-key parameter, related to configuration of a web cache.
Published: 2007-07-06T19:00:00.000Z
Updated: 2024-08-07T14:21:36.422Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-6011 |
vulnerable | 2026-06-08 04:49:21.799126 |
Details available
Unspecified vulnerability in SAP Web Application Server before 6.40 patch 6 allows remote attackers to cause a denial of service (enserver.exe crash) via a certain UDP packet to port 64999, aka "two bytes UDP crash," a different vulnerability than CVE-2006-5785.
Published: 2006-11-21T23:00:00.000Z
Updated: 2024-08-07T20:12:31.304Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5785 |
vulnerable | 2026-06-08 04:49:21.293406 |
Details available
Unspecified vulnerability in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to cause a denial of service (enserver.exe crash) via a 0x72F2 sequence on UDP port 64999.
Published: 2006-11-07T23:00:00.000Z
Updated: 2024-08-07T20:04:55.458Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5784 |
vulnerable | 2026-06-08 04:49:21.292242 |
Details available
Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to read arbitrary files via crafted data on a "3200+SYSNR" TCP port, as demonstrated by port 3201. NOTE: this issue can be leveraged by local users to access a named pipe as the SAPServiceJ2E user.
Published: 2006-11-07T23:00:00.000Z
Updated: 2024-08-07T20:04:55.626Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1039 |
vulnerable | 2026-06-08 04:48:56.078338 |
Details available
SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive authentication information, or have other impacts, via a ";%20" followed by encoded HTTP headers.
Published: 2006-03-07T11:00:00.000Z
Updated: 2024-08-07T16:56:15.448Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3635 |
vulnerable | 2026-06-08 04:48:41.464693 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3634 |
vulnerable | 2026-06-08 04:48:41.464226 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3633 |
vulnerable | 2026-06-08 04:48:41.462665 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.