| Package | Affected versions | Patched versions |
|---|---|---|
| sap web application server | = 6.10= 6.20= 6.40 |
SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive authentication information, or have other impacts, via a ";%20" followed by encoded HTTP headers.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free