CVE record · 1 source
CVE-2026-109805
CVSS 6.4Due to a weak HMAC cryptography calculation when receiving an RFC callback in SAP NetWeaver and ABAP Platform (Application Server ABAP), an…
- Vendor
- SAP_SE
- Product
- SAP NetWeaver and ABAP Platform (Application Server ABAP)
- CVSS v3.1
- 6.4 AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weakness
- CWE-328
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Due to a weak HMAC cryptography calculation when receiving an RFC callback in SAP NetWeaver and ABAP Platform (Application Server ABAP), an…
Due to a weak HMAC cryptography calculation when receiving an RFC callback in SAP NetWeaver and ABAP Platform (Application Server ABAP), an authenticated attacker with high privileges and access to a network segment between…