CVE-2007-3615

Internet Communication Manager (aka ICMAN.exe or ICM) in SAP NetWeaver Application Server 6.x and 7.x, possibly only on Windows, allows remote attackers to cause a denial of service (process crash) via a URI of a certain length that contains a sap-isc-key parameter, related to configuration of a web cache.

• http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0105.html
• http://osvdb.org/38095
• http://secunia.com/advisories/25964Patch, Vendor Advisory
• http://securityreason.com/securityalert/2875
• http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-internet-communication-manager-dos/Vendor Advisory
• http://www.securityfocus.com/archive/1/472890/100/0/threaded
• http://www.securityfocus.com/bid/24774
• http://www.securitytracker.com/id?1018336
• http://www.vupen.com/english/advisories/2007/2450
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35278
• http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0105.html
• http://osvdb.org/38095
• http://secunia.com/advisories/25964Patch, Vendor Advisory
• http://securityreason.com/securityalert/2875
• http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-internet-communication-manager-dos/Vendor Advisory
• http://www.securityfocus.com/archive/1/472890/100/0/threaded
• http://www.securityfocus.com/bid/24774
• http://www.securitytracker.com/id?1018336
• http://www.vupen.com/english/advisories/2007/2450
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35278

Published

Jul 6, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-3609Multiple SQL injection vulnerabilities in eMeeting Online Da…
• CVE-2007-3610SQL injection vulnerability in categories_type.php in phpVID…
• CVE-2007-3611admin.php in VRNews 1.1.1, and possibly other 1.x versions, …
• CVE-2007-3612Stack-based buffer overflow in Visual IRC (ViRC) 2.0 allows …
• CVE-2007-3613Cross-site scripting (XSS) vulnerability in ADM:GETLOGFILE i…
• CVE-2007-3614Multiple stack-based buffer overflows in waHTTP.exe (aka the…
• CVE-2007-3616index.php in vtiger CRM before 5.0.3 allows remote authentic…
• CVE-2007-3617The report module in vtiger CRM before 5.0.3 does not proper…
• CVE-2007-3618Stack-based buffer overflow in the NetWorker Remote Exec Ser…
• CVE-2007-3619Directory traversal vulnerability in login.php in Maia Mailg…
• CVE-2007-3620Multiple directory traversal vulnerabilities in Maia Mailgua…
• CVE-2007-3621Multiple CRLF injection vulnerabilities in callboth.php in A…