title: Memory Corruption vulnerability in SAP Web Dispatcher
description: The SAP Web Dispatcher - versions WEBDISP 7.53, WEBDISP 7.54, WEBDISP 7.77, WEBDISP 7.85, WEBDISP 7.89, WEBDISP 7.91, WEBDISP 7.92, WEBDISP 7.93, KERNEL 7.53, KERNEL 7.54 KERNEL 7.77, KERNEL 7.85, KERNEL 7.89, KERNEL 7.91, KERNEL 7.92, KERNEL 7.93, KRNL64UC 7.53, HDB 2.00, XS_ADVANCED_RUNTIME 1.00, SAP_EXTENDED_APP_SERVICES 1, has a vulnerability that can be exploited by an unauthenticated attacker to cause memory corruption through logical errors in memory management this may leads to information disclosure or system crashes, which can have low impact on confidentiality and high impact on the integrity and availability of the system.
problem types: CWE-787 Out-of-bounds Write
affected:
{
defaultStatus: unaffected
product: SAP Web Dispatcher
vendor: SAP_SE
versions:
status: affected, version: WEBDISP 7.53
status: affected, version: WEBDISP 7.54
status: affected, version: WEBDISP 7.77
status: affected, version: WEBDISP 7.85
status: affected, version: WEBDISP 7.89
status: affected, version: WEBDISP 7.91
status: affected, version: WEBDISP 7.92
status: affected, version: WEBDISP 7.93
status: affected, version: KERNEL 7.53
status: affected, version: KERNEL 7.54 KERNEL 7.77
status: affected, version: KERNEL 7.85
status: affected, version: KERNEL 7.89
status: affected, version: KERNEL 7.91
status: affected, version: KERNEL 7.92
status: affected, version: KERNEL 7.93
status: affected, version: KRNL64UC 7.53
status: affected, version: HDB 2.00
status: affected, version: XS_ADVANCED_RUNTIME 1.00
status: affected, version: SAP_EXTENDED_APP_SERVICES 1
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.7
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL