Known vulnerabilities in SAP Web Dispatcher Kernel

Known vulnerabilities in SAP Web Dispatcher Kernel

Vendor: SAP

Software: SAP Web Dispatcher Kernel

Software CPE: cpe:2.3:a:sap:sap_web_dispatcher_kernel:*:*:*:*:*:*:*:*

Website: https://www.sap.com/

Total vulnerabilities: 8

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU105503 - Exposure of sensitive information to an unauthorized actor CVE-2025-0071	CWE-200	Low	No	No	-	11.03.2025	SB2025031135
#VU100240 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-47590	CWE-79	Low	No	No	-	12.11.2024	SB2024111250
#VU80691 - Memory corruption CVE-2023-40308	CWE-119	Medium	No	No	-	12.09.2023	SB2023091261 SB2023092234 SB2023092235 and 5 more
#VU80681 - Improper Authentication CVE-2023-40309	CWE-287	High	No	No	-	12.09.2023	SB2023091261 SB2023092234 SB2023092235 and 5 more
#VU78729 - Memory corruption CVE-2023-35871	CWE-119	High	No	No	-	27.07.2023	SB2023072756
#VU78724 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-33987	CWE-444	Medium	No	No	-	27.07.2023	SB2023072755
#VU75157 - Improper Restriction of Communication Channel to Intended Endpoints CVE-2023-29108	CWE-923	Medium	No	No	-	17.04.2023	SB2023041711
#VU75156 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-33683	CWE-444	Medium	No	No	-	17.04.2023	SB2023041710