Description
SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary data, allowing for function execution impersonating the victim or poisoning intermediary Web caches.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| SAP Content Server | SAP SE / SAP Content Server | 7.53 | affected |
| SAP NetWeaver and ABAP Platform | SAP SE / SAP NetWeaver and ABAP Platform | 7.22 | affected |
| SAP NetWeaver and ABAP Platform | SAP SE / SAP NetWeaver and ABAP Platform | 7.22EXT | affected |
| SAP NetWeaver and ABAP Platform | SAP SE / SAP NetWeaver and ABAP Platform | 7.49 | affected |
| SAP NetWeaver and ABAP Platform | SAP SE / SAP NetWeaver and ABAP Platform | 7.53 | affected |
| SAP NetWeaver and ABAP Platform | SAP SE / SAP NetWeaver and ABAP Platform | 7.77 | affected |
| SAP NetWeaver and ABAP Platform | SAP SE / SAP NetWeaver and ABAP Platform | 7.81 | affected |
| SAP NetWeaver and ABAP Platform | SAP SE / SAP NetWeaver and ABAP Platform | 7.85 | affected |
| SAP NetWeaver and ABAP Platform | SAP SE / SAP NetWeaver and ABAP Platform | 7.86 | affected |
| SAP NetWeaver and ABAP Platform | SAP SE / SAP NetWeaver and ABAP Platform | 7.87 | affected |
| SAP NetWeaver and ABAP Platform | SAP SE / SAP NetWeaver and ABAP Platform | 8.04 | affected |
| SAP NetWeaver and ABAP Platform | SAP SE / SAP NetWeaver and ABAP Platform | KERNEL 7.22 | affected |
| SAP NetWeaver and ABAP Platform | SAP SE / SAP NetWeaver and ABAP Platform | KRNL64NUC 7.22 | affected |
| SAP NetWeaver and ABAP Platform | SAP SE / SAP NetWeaver and ABAP Platform | KRNL64UC 8.04 | affected |
| SAP Web Dispatcher | SAP SE / SAP Web Dispatcher | 7.22EXT | affected |
| SAP Web Dispatcher | SAP SE / SAP Web Dispatcher | 7.49 | affected |
| SAP Web Dispatcher | SAP SE / SAP Web Dispatcher | 7.53 | affected |
| SAP Web Dispatcher | SAP SE / SAP Web Dispatcher | 7.77 | affected |
| SAP Web Dispatcher | SAP SE / SAP Web Dispatcher | 7.81 | affected |
| SAP Web Dispatcher | SAP SE / SAP Web Dispatcher | 7.85 | affected |
| SAP Web Dispatcher | SAP SE / SAP Web Dispatcher | 7.86 | affected |
| SAP Web Dispatcher | SAP SE / SAP Web Dispatcher | 7.87 | affected |