CVE-2007-3615 : Internet Communication Manager (aka ICMAN.exe or ICM) in SAP NetWeaver Applicati

Internet Communication Manager (aka ICMAN.exe or ICM) in SAP NetWeaver Application Server 6.x and 7.x, possibly only on Windows, allows remote attackers to cause a denial of service (process crash) via a URI of a certain length that contains a sap-isc-key parameter, related to configuration of a web cache.

Published 2007-07-06 19:30:00

Updated 2025-04-09 00:30:58

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2007-3615

SAP » Sap Web Application Server » Version: 6.10
cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » All Windows
SAP » Sap Web Application Server » Version: 6.20
cpe:2.3:a:sap:sap_web_application_server:6.20:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » All Windows
SAP » Sap Web Application Server » Version: 6.40
cpe:2.3:a:sap:sap_web_application_server:6.40:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » All Windows
SAP » Sap Web Application Server » Version: 7.0
cpe:2.3:a:sap:sap_web_application_server:7.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » All Windows
SAP » Sap Web Application Server » Version: 7.0.10
cpe:2.3:a:sap:sap_web_application_server:7.0.10:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » All Windows
SAP » Internet Communication Manager
cpe:2.3:a:sap:internet_communication_manager:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » All Windows

Exploit prediction scoring system (EPSS) score for CVE-2007-3615

EPSS FAQ

1.97%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 82 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-3615

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

References for CVE-2007-3615

Jump to

Vulnerability Details : CVE-2007-3615

Products affected by CVE-2007-3615

Exploit prediction scoring system (EPSS) score for CVE-2007-3615

CVSS scores for CVE-2007-3615

References for CVE-2007-3615