VULNERABILITY INTELLIGENCE
CVE-2007-3615
CVSS score7.8 HIGH
EPSS probability2.35%
CISA KEVNot currently listed
Published2007-07-06
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Description
Internet Communication Manager (aka ICMAN.exe or ICM) in SAP NetWeaver Application Server 6.x and 7.x, possibly only on Windows, allows remote attackers to cause a denial of service (process crash) via a URI of a certain length that contains a sap-isc-key parameter, related to configuration of a web cache.