Description
SAP Web Dispatcher does not sufficiently validate certain inputs during processing, which could lead to memory corruption. An attacker authenticated as a non-administrative user could exploit this vulnerability by providing specially crafted input, causing the Web Dispatcher process to terminate without user interaction. As a result, the Web Dispatcher and all backend systems reachable through it become unavailable, leading to a high impact on availability. There is no impact on confidentiality or integrity of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Web Dispatcher | KRNL64UC 7.53, WEBDISP 7.53, 7.54, 7.77, 7.93, 9.16, KERNEL 7.53, 9.20, 9.21 | — |
Advisories 2
- NCSC-2026-0485 Kwetsbaarheden verholpen in SAP-producten NCSC-NL (Netherlands) · Nov 12, 2026
- WID-SEC-2026-4420 SAP Patch Day November 2026: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 9, 2026