CVE-2018-11415

Summary of CVE-2018-11415 and public details : SAP ITS 6200.X.X is reported to be vulnerable to a reflected Cross-Site Scripting (XSS) flaw triggered via certain wgate URIs. Multiple connected sources confirm an XSS scenario in the SAP Internet Transaction Server 6200.X.X, with references indicat...

CVE-2003-0749

CVE-2003-0749 describes an XSS vulnerability in SAP Internet Transaction Server (ITS) involving wgate.dll. The affected component is wgate.dll (SAP ITS) with version details in the description, and the vulnerability is exploitable via the ~service parameter to inject arbitrary web script and stea...

CVE-2003-0748

CVE-2003-0748 describes a directory traversal in SAP ITS 4620.2.0.323011 via wgate.dll, allowing remote readers to access arbitrary files through dot-dot backslash sequences in the ~theme parameter and a mis-handled ~template parameter with a filename followed by spaces that can prevent a .html e...

CVE-2006-5114

SAP ITS exposed vulnerability: Cross-site scripting in wgate.dll (wgate) affecting SAP Internet Transaction Server versions 6.1 and 6.2. Attacker can inject arbitrary script via the ~urlmime or ~command parameters. This CVE (CVE-2006-5114) shares vectors with CVE-2003-0749 but is a separate entry...

CVE-2003-0747

CVE-2003-0747 affects SAP Internet Transaction Server (ITS) 4620.2.0.323011 via its wgate.dll. The vulnerability arises from incorrect parameters (~service, ~templatelanguage, ~language, ~theme, ~template) that cause error messages to leak potentially sensitive information, including directory st...

CVE-2003-1038

The CVE-2003-1038 entry affects the AGate component for SAP Internet Transaction Server (ITS). The issue allows remote attackers to obtain sensitive information by abusing a ~command parameter with an AgateInstallCheck value, which exposes a list of installed DLLs and full pathnames. This relates...

CVE-2003-1037

The CVE-2003-1037 entry describes a format string vulnerability in the WGate component for SAP Internet Transaction Server (ITS). The issue allows remote attackers to execute arbitrary code by crafting input through a high “trace level.” The description does not provide specific affected versions...

CVE-2003-1036

The CVE-2003-1036 entry describes multiple buffer overflows in the SAP ITS AGate component that allow remote code execution. The vulnerable surface includes long values for the parameters ~command, ~runtimemode, ~session, or a long HTTP Content-Type header. Affected software is the SAP Internet T...

CVE-2008-2123

CVE-2008-2123 describes an XSS vulnerability in SAP Internet Transaction Server (ITS) WGate. The issue affects ITS 6.20 where an attacker can inject arbitrary script or HTML via (1) a “” sequence in the ~service parameter to wgate.dll, or (2) Javascript splicing in the query string (stated as a v...