Just an update. I found this Test your server for Heartbleed (CVE-2014-0160) . I did execute it against external facing portal that has SAP web dispatcher in front of it. It says that the system is not affected by this issue. My guess is that this extension is not supported by SAP.
Cheers
