Vulnerability Database

308,485

Total vulnerabilities in the database

CVE-2024-22124

Under certain conditions, Internet Communication Manager (ICM) or SAP Web Dispatcher - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22_EXT, WEBDISP 7.22_EXT, WEBDISP 7.53, WEBDISP 7.54, could allow an attacker to access information which would otherwise be restricted causing high impact on confidentiality.

  • Published: Jan 9, 2024
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-22124
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.1
  • AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

CWEs:

Software From Fixed in
sap / netweaver krnl64nuc_7.22 krnl64nuc_7.22.x
sap / netweaver kernel_7.22 kernel_7.22.x
sap / netweaver krnl64uc_7.22ext krnl64uc_7.22ext.x
sap / netweaver krnl64uc_7.53 krnl64uc_7.53.x
sap / netweaver krnl64nuc_7.22ext krnl64nuc_7.22ext.x
sap / netweaver webdisp_7.22ext webdisp_7.22ext.x
sap / netweaver webdisp_7.53 webdisp_7.53.x
sap / netweaver webdisp_7.54 webdisp_7.54.x
sap / netweaver kernel_7.53 kernel_7.53.x
sap / netweaver kernel_7.54 kernel_7.54.x