CVE-2007-3614

no score yetEPSS 70%

sap sap db: no CVSS score yet. EPSS 70% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 through 7.5, allow remote attackers to execute arbitrary code via (1) a certain cookie value; (2) a certain additional parameter, related to sapdbwa_GetQueryString; and other unspecified vectors related to "numerous other fields."

EPSS: 70% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
Published: 2007-07-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

sap:sap_db

References

http://osvdb.org/37838
http://secunia.com/advisories/25954
http://securityreason.com/securityalert/2867
http://www.kb.cert.org/vuls/id/679041
http://www.ngssoftware.com/advisories/critical-risk-vulnerability-in-sap-db-web-server-stack-overflow/

Check your stack JSON