Approved changes feed: RSS · Atom

cpe:2.3:a:sap:web_dispatcher:7.86:*:*:*:*:*:*:*

part: a version: 7.86 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductWeb Dispatcher (d34d35ec-4397-5744-824b-669857196925)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-28773 vulnerable 2026-06-08 05:42:45.783401 Details available
Due to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager, the application may crash, leading to denial of service, but can be restarted automatically.
Published: 2022-04-12T16:11:30.000Z
Updated: 2024-08-03T06:03:52.639Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28772 vulnerable 2026-06-08 05:42:45.782204 Details available
By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.85, 7.86, or Internet Communication Manager - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, which makes these programs unavailable, leading to denial of service.
Published: 2022-04-12T16:11:32.000Z
Updated: 2024-08-03T06:03:52.584Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22536 vulnerable 2026-06-08 05:40:54.186631 Details available
SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepend a victim's request with arbitrary data. This way, the attacker can execute functions impersonating the victim or poison intermediary Web caches. A successful attack could result in complete compromise of Confidentiality, Integrity and Availability of the system.
Published: 2022-02-09T22:05:24.000Z
Updated: 2025-10-21T23:15:47.646Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.