CVE-2026-109803

Vendor

SAP_SE

Product

SAP NetWeaver Knowledge Management (XML Forms)

CVSS v3.1

9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness

CWE-94

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 44
   CVE NVD 1h ago

   SAP NetWeaver Knowledge Management (XML Forms) does not sufficiently restrict the selection of XSL transformations processed by the affected…

   SAP NetWeaver Knowledge Management (XML Forms) does not sufficiently restrict the selection of XSL transformations processed by the affected functionality. Under certain conditions, an authenticated user with access to the…

   CVSS 9.9 CVE-2026-109803 SAP_SE