Read the docs
TI-2023-16854 Aliases CVE-2023-33987GHSA-hp7v-3j27-4q36

Request smuggling and request concatenation in SAP Web Dispatcher

Priority MEDIUM 50CWE-444Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · Low
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

An unauthenticated attacker in SAP Web Dispatcher - versions WEBDISP 7.49, WEBDISP 7.53, WEBDISP 7.54, WEBDISP 7.77, WEBDISP 7.81, WEBDISP 7.85, WEBDISP 7.88, WEBDISP 7.89, WEBDISP 7.90, KERNEL 7.49, KERNEL 7.53, KERNEL 7.54 KERNEL 7.77, KERNEL 7.81, KERNEL 7.85, KERNEL 7.88, KERNEL 7.89, KERNEL 7.90, KRNL64NUC 7.49, KRNL64UC 7.49, KRNL64UC 7.53, HDB 2.00, XS_ADVANCED_RUNTIME 1.00, SAP_EXTENDED_APP_SERVICES 1, can submit a malicious crafted request over a network to a front-end server which may, over several attempts, result in a back-end server confusing the boundaries of malicious and legitimate messages. This can result in the back-end server executing a malicious payload which can be used to read or modify information on the server or make it temporarily unavailable.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00691 53rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SAPSAP Web DispatcherWEBDISP 7.49; WEBDISP 7.53; WEBDISP 7.54; WEBDISP 7.77; WEBDISP 7.81; WEBDISP 7.85; WEBDISP 7.88; WEBDISP 7.89; WEBDISP 7.90; KERNEL 7.49; KERNEL 7.53; KERNEL 7.54 KERNEL 7.77; KERNEL 7.81; KERNEL 7.85; KERNEL 7.88; KERNEL 7.89; KERNEL 7.90; KRNL64NUC 7.49; KRNL64UC 7.49; KRNL64UC 7.53; HDB 2.00; XS_ADVANCED_RUNTIME 1.00; SAP_EXTENDED_APP_SERVICES 1—No fix listedCNA
  • SAP Web Dispatcher VendorSAP Affected WEBDISP 7.49; WEBDISP 7.53; WEBDISP 7.54; WEBDISP 7.77; WEBDISP 7.81; WEBDISP 7.85; WEBDISP 7.88; WEBDISP 7.89; WEBDISP 7.90; KERNEL 7.49; KERNEL 7.53; KERNEL 7.54 KERNEL 7.77; KERNEL 7.81; KERNEL 7.85; KERNEL 7.88; KERNEL 7.89; KERNEL 7.90; KRNL64NUC 7.49; KRNL64UC 7.49; KRNL64UC 7.53; HDB 2.00; XS_ADVANCED_RUNTIME 1.00; SAP_EXTENDED_APP_SERVICES 1 Fixed in — No fix listed CNA

CPE configurations NVD · 24

CPEVersionsRoleVendor
cpe:2.3:a:sap:web_dispatcher:7.49:*:*:*:*:*:*:*7.49VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:7.53:*:*:*:*:*:*:*7.53VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:7.54:*:*:*:*:*:*:*7.54VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:7.77:*:*:*:*:*:*:*7.77VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:7.81:*:*:*:*:*:*:*7.81VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:7.85:*:*:*:*:*:*:*7.85VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:7.88:*:*:*:*:*:*:*7.88VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:7.89:*:*:*:*:*:*:*7.89VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:7.90:*:*:*:*:*:*:*7.90VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:hdb_2.00:*:*:*:*:*:*:*hdb_2.00VulnerableSAP
  • cpe:2.3:a:sap:web_dispatcher:7.49:*:*:*:*:*:*:* Versions 7.49 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:7.53:*:*:*:*:*:*:* Versions 7.53 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:7.54:*:*:*:*:*:*:* Versions 7.54 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:7.77:*:*:*:*:*:*:* Versions 7.77 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:7.81:*:*:*:*:*:*:* Versions 7.81 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:7.85:*:*:*:*:*:*:* Versions 7.85 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:7.88:*:*:*:*:*:*:* Versions 7.88 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:7.89:*:*:*:*:*:*:* Versions 7.89 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:7.90:*:*:*:*:*:*:* Versions 7.90 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:hdb_2.00:*:*:*:*:*:*:* Versions hdb_2.00 Vulnerable ·SAP
Show 14 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:sap:web_dispatcher:kernel_7.49:*:*:*:*:*:*:*kernel_7.49VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:kernel_7.53:*:*:*:*:*:*:*kernel_7.53VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:kernel_7.54:*:*:*:*:*:*:*kernel_7.54VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:kernel_7.77:*:*:*:*:*:*:*kernel_7.77VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:kernel_7.81:*:*:*:*:*:*:*kernel_7.81VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:kernel_7.85:*:*:*:*:*:*:*kernel_7.85VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:kernel_7.88:*:*:*:*:*:*:*kernel_7.88VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:kernel_7.89:*:*:*:*:*:*:*kernel_7.89VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:kernel_7.90:*:*:*:*:*:*:*kernel_7.90VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:krnl64nuc_7.49:*:*:*:*:*:*:*krnl64nuc_7.49VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:krnl64uc_7.49:*:*:*:*:*:*:*krnl64uc_7.49VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:krnl64uc_7.53:*:*:*:*:*:*:*krnl64uc_7.53VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:sap_extended_app_services_1:*:*:*:*:*:*:*sap_extended_app_services_1VulnerableSAP
cpe:2.3:a:sap:web_dispatcher:xs_advanced_runtime_1.00:*:*:*:*:*:*:*xs_advanced_runtime_1.00VulnerableSAP
  • cpe:2.3:a:sap:web_dispatcher:kernel_7.49:*:*:*:*:*:*:* Versions kernel_7.49 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:kernel_7.53:*:*:*:*:*:*:* Versions kernel_7.53 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:kernel_7.54:*:*:*:*:*:*:* Versions kernel_7.54 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:kernel_7.77:*:*:*:*:*:*:* Versions kernel_7.77 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:kernel_7.81:*:*:*:*:*:*:* Versions kernel_7.81 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:kernel_7.85:*:*:*:*:*:*:* Versions kernel_7.85 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:kernel_7.88:*:*:*:*:*:*:* Versions kernel_7.88 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:kernel_7.89:*:*:*:*:*:*:* Versions kernel_7.89 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:kernel_7.90:*:*:*:*:*:*:* Versions kernel_7.90 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:krnl64nuc_7.49:*:*:*:*:*:*:* Versions krnl64nuc_7.49 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:krnl64uc_7.49:*:*:*:*:*:*:* Versions krnl64uc_7.49 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:krnl64uc_7.53:*:*:*:*:*:*:* Versions krnl64uc_7.53 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:sap_extended_app_services_1:*:*:*:*:*:*:* Versions sap_extended_app_services_1 Vulnerable ·SAP
  • cpe:2.3:a:sap:web_dispatcher:xs_advanced_runtime_1.00:*:*:*:*:*:*:* Versions xs_advanced_runtime_1.00 Vulnerable ·SAP

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-33987
  2. 2026-10-03 Alias added: GHSA-hp7v-3j27-4q36

References

Advisory 1

Other 1

  • TI-2022-06811 SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP… KEVCVSS 3.1CRITICAL 10.0
  • TI-2023-21149 Missing Authorization check in SAP CommonCryptoLib CVSS 3.1CRITICAL 9.8
  • TI-2021-15841 SAP Web Dispatcher versions - 7.49, 7.53, 7.77, 7.81, KRNL64NUC - 7.22, 7.22EXT, 7.49… CVSS 3.1CRITICAL 9.4
  • TI-2023-17942 Memory Corruption vulnerability in SAP Web Dispatcher CVSS 3.1CRITICAL 9.4
  • TI-2023-21148 Memory Corruption vulnerability in SAP CommonCryptoLib CVSS 3.1HIGH 7.5
  • TI-2022-11400 Uncontrolled recursion in SAP NetWeaver CVSS 3.1HIGH 7.5
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences