CVE-2006-1039

MEDIUM · CVSS 6.4 EPSS 2.74%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-03-07 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2006-1039

Severity

MEDIUM

CVSS

6.4

EPSS

2.74%

Original NVD Description

SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive authentication information, or have other impacts, via a ";%20" followed by encoded HTTP headers.