{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-02T05:30:10.609","vulnerabilities":[{"cve":{"id":"CVE-2021-33683","sourceIdentifier":"cna@sap.com","published":"2021-07-14T12:15:09.237","lastModified":"2026-06-17T03:55:01.513","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SAP Web Dispatcher and Internet Communication Manager (ICM), versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53, 7.73, WEBDISP 7.53, 7.73, 7.77, 7.81, 7.82, 7.83, KERNEL 7.21, 7.22, 7.49, 7.53, 7.73, 7.77, 7.81, 7.82, 7.83, process invalid HTTP header. The incorrect handling of the invalid Transfer-Encoding header in a particular manner leads to a possibility of HTTP Request Smuggling attack. An attacker could exploit this vulnerability to bypass web application firewall protection, divert sensitive data such as customer requests, session credentials, etc."},{"lang":"es","value":"SAP Web Dispatcher e Internet Communication Manager (ICM), versiones - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22EXT, 7. 49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53, 7.73, WEBDISP 7.53, 7.73, 7.77, 7.81, 7.82, 7.83, KERNEL 7.21, 7.22, 7.49, 7.53, 7.73, 7.77, 7.81, 7.82, 7.83, procesan un encabezado HTTP no válido. El manejo incorrecto de la cabecera Transfer-Encoding no válida de manera particular conlleva a una posibilidad de ataque de contrabando de peticiones HTTP. Un atacante podría explotar esta vulnerabilidad para omitir la protección del firewall de la aplicación web y desviar datos confidenciales, como peticiones de clientes, credenciales de sesión, etc"}],"affected":[{"source":"cna@sap.com","affectedData":[{"vendor":"SAP SE","product":"SAP Web Dispatcher and Internet Communication Manager","versions":[{"version":"< KRNL32NUC 7.21","status":"affected"},{"version":"< 7.21EXT","status":"affected"},{"version":"< 7.22","status":"affected"},{"version":"< 7.22EXT","status":"affected"},{"version":"< KRNL32UC 7.21","status":"affected"},{"version":"< KRNL64NUC 7.21","status":"affected"},{"version":"< 7.49","status":"affected"},{"version":"< KRNL64UC 7.21","status":"affected"},{"version":"< 7.53","status":"affected"},{"version":"< 7.73","status":"affected"},{"version":"< WEBDISP 7.53","status":"affected"},{"version":"< 7.77","status":"affected"},{"version":"< 7.81","status":"affected"},{"version":"< 7.82","status":"affected"},{"version":"< 7.83","status":"affected"},{"version":"< KERNEL 7.21","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV30":[{"source":"cna@sap.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"cna@sap.com","type":"Secondary","description":[{"lang":"en","value":"CWE-444"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-444"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:web_dispatcher:7.8_kernel_7.21:*:*:*:*:*:*:*","matchCriteriaId":"CEFAE5D3-6729-47E6-8547-EDC127052682"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:web_dispatcher:7.21ext:*:*:*:*:*:*:*","matchCriteriaId":"5DACDADA-64ED-4AFA-B6A0-A528334D9FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:web_dispatcher:7.22:*:*:*:*:*:*:*","matchCriteriaId":"668A8F88-F8E1-4D57-83C7-A54C03A9931B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:web_dispatcher:7.22ext:*:*:*:*:*:*:*","matchCriteriaId":"D3F76E6A-2F27-450C-AAB5-E49A64079CAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:web_dispatcher:7.49:*:*:*:*:*:*:*","matchCriteriaId":"0B4A7850-377C-4463-A5D7-07F516FBD74A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:web_dispatcher:7.53:*:*:*:*:*:*:*","matchCriteriaId":"47D4D542-2EC2-490B-B4E9-3E7BB8D59B77"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:web_dispatcher:7.73:*:*:*:*:*:*:*","matchCriteriaId":"8E2A20A3-FDA5-4E75-A5F0-362840E5909D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:web_dispatcher:7.77:*:*:*:*:*:*:*","matchCriteriaId":"E33D9481-3CF6-4AA3-B115-7903AC6DAE25"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:web_dispatcher:7.81:*:*:*:*:*:*:*","matchCriteriaId":"49FF2A5B-E5F0-4991-9AA3-7CB3B8C62941"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:web_dispatcher:7.82:*:*:*:*:*:*:*","matchCriteriaId":"6C2DB75B-321F-4B4C-9398-21817BE7476E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:web_dispatcher:krnl32nuc_7.21:*:*:*:*:*:*:*","matchCriteriaId":"769D40FF-AB05-4289-A77C-6FC272F02CDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:web_dispatcher:krnl32uc_7.21:*:*:*:*:*:*:*","matchCriteriaId":"3B209FA5-802F-4A6E-B031-A4A06FE9A01E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:web_dispatcher:krnl64nuc_7.21:*:*:*:*:*:*:*","matchCriteriaId":"1C32DCE3-2553-4D8F-931C-5CD1F95340C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:web_dispatcher:krnl64uc_7.21:*:*:*:*:*:*:*","matchCriteriaId":"EE9042C8-EDCD-402F-BFFA-70BF6BE53A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:web_dispatcher:webdisp_7.53:*:*:*:*:*:*:*","matchCriteriaId":"5481831F-91CC-49DD-A54B-277A6E6D22AE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_communication_manager:7.21ext:*:*:*:*:*:*:*","matchCriteriaId":"67918BDF-E07C-495D-8408-4C09F0E1F936"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_communication_manager:7.22:*:*:*:*:*:*:*","matchCriteriaId":"47816D78-4FF9-48A6-A759-B174520C0B3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_communication_manager:7.22ext:*:*:*:*:*:*:*","matchCriteriaId":"3C852E38-88B7-454D-8011-4D92796E15D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_communication_manager:7.49:*:*:*:*:*:*:*","matchCriteriaId":"E595F8B1-8F17-411F-BF6E-ED3EB9459938"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_communication_manager:7.53:*:*:*:*:*:*:*","matchCriteriaId":"8C949541-3D9C-4253-A43F-0DDA0FA8CF92"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_communication_manager:7.73:*:*:*:*:*:*:*","matchCriteriaId":"13D1D10D-0C54-44A2-9983-6AADDB14BB7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_communication_manager:7.77:*:*:*:*:*:*:*","matchCriteriaId":"327D609D-2B85-4719-9F2E-166E9D99D6C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_communication_manager:7.81:*:*:*:*:*:*:*","matchCriteriaId":"A6ED4FA2-5C99-4F0F-BF06-6DC022BDE65A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_communication_manager:7.82:*:*:*:*:*:*:*","matchCriteriaId":"B2E37A8C-494F-4E4C-AE6A-255D1BB19429"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_communication_manager:kernel_7.21:*:*:*:*:*:*:*","matchCriteriaId":"8CE72859-CF21-4095-9262-59385AEAB47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_communication_manager:krnl32nuc_7.21:*:*:*:*:*:*:*","matchCriteriaId":"CFA35FF0-0784-4936-9581-8DC9FFC3E206"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_communication_manager:krnl32uc_7.21:*:*:*:*:*:*:*","matchCriteriaId":"92298C45-32BB-4957-92EA-9A9ABFDA892E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_communication_manager:krnl64nuc_7.21:*:*:*:*:*:*:*","matchCriteriaId":"55623101-2144-45CB-B612-F449A160F7F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_communication_manager:krnl64uc_7.21:*:*:*:*:*:*:*","matchCriteriaId":"C0410689-F1C7-4A08-9D75-6BF742DC2731"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_communication_manager:webdisp_7.53:*:*:*:*:*:*:*","matchCriteriaId":"9A364314-7520-43F0-B4EA-B8EEBB30A3D3"}]}]}],"references":[{"url":"https://launchpad.support.sap.com/#/notes/3000663","source":"cna@sap.com","tags":["Permissions Required"]},{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=580617506","source":"cna@sap.com","tags":["Vendor Advisory"]},{"url":"https://launchpad.support.sap.com/#/notes/3000663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=580617506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}