Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2006-1039

CWE-94 — Code Injection4 documents4 sources
Severity
6.4MEDIUM
EPSS
5.9%
top 9.45%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
SAP SAP WEB Application Server
Timeline
PublishedMar 7
Latest updateMay 1

Description

SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive authentication information, or have other impacts, via a ";%20" followed by encoded HTTP headers.

CVSS vector

AV:N/AC:L/C:P/I:P/A:NExploitability: 10.0 | Impact: 4.9

Affected Packages1 packages

▶NVDsap/sap_web_application_server6.10, 6.20, 6.40+2

🔴Vulnerability Details

2
GHSA
GHSA-fcph-vwq2-2v5x: SAP Web Application Server (WebAS) Kernel before 7↗2022-05-01
▶
CVEList
CVE-2006-1039: SAP Web Application Server (WebAS) Kernel before 7↗2006-03-07
▶

💥Exploits & PoCs

1
Exploit-DB
SAP Web Application Server 6.x/7.0 - Input Validation↗2005-11-09
▶
CVE-2006-1039 (MEDIUM CVSS 6.4) | SAP Web Application Server (WebAS) | cvebase.io