VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 7, 2006· Updated Jun 16, 2026

CVE-2006-1039

CVE-2006-1039

Description

SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive authentication information, or have other impacts, via a ";%20" followed by encoded HTTP headers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • SAP/Sap Web Application Server3 versions
    cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:sap_web_application_server:6.20:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:sap_web_application_server:6.40:*:*:*:*:*:*:*
  • SAP/Web Application Server (WebAS) Kernelllm-create
    Range: <7.0

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.