What’s Vulnerable › Vulnerabilities

CVE-2003-1038

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2004-04-15 · updated 2026-06-16

Description

The AGate component for SAP Internet Transaction Server (ITS) allows remote attackers to obtain sensitive information via a ~command parameter with an AgateInstallCheck value, which provides a list of installed DLLs and full pathnames.

Affected products

• SAP Internet Transaction Server: through 4.6_pl463; through 6.10_pl30; through 6.20_pl7

References

• http://www.phenoelit.de/stuff/Phenoelit20c3.pd
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15516
• http://www.phenoelit.de/stuff/Phenoelit20c3.pd
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15516

Get alerted when CVE-2003-1038 or the next vulnerability affects your stack