The vulnerability of SAP NetWeaver web application servers’ Internet Communication Manager and SAP Web Dispatcher, related to deficiencies in the mechanism for assigning internal resource access levels for debugging purposes, allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the SAP NetWeaver Internet Communication Manager and SAP Web Dispatcher web applications is related to deficiencies in the mechanism for assigning internal resources with access levels for debugging purposes. Exploiting this vulnerability can allow attackers to compromise the...

CVE-2025-42935

The SAP NetWeaver Application Server ABAP and ABAP Platform Internet Communication Manager ICM permits authorized users with admin privileges and local access to log files to read sensitive information, resulting in information disclosure. This leads to high impact on the confidentiality of the...

CVE-2020-6304: Improper Input Validation

Improper input validation in SAP NetWeaver Internet Communication Manager update provided in KRNL32NUC & KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT KRNL64NUC & KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49 KERNEL 7.21, 7.49, 7.53 allows an attacker to prevent users from accessing its services through a...