CVE-2026-109810

Vendor

SAP_SE

Product

SAP NetWeaver Application Server Java (Web Dynpro Java)

CVSS v3.1

6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness

CWE-79

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 29
   CVE NVD 3h ago

   SAP NetWeaver Application Server Java (Web Dynpro Java) does not sufficiently validate certain request parameters used to resolve styling resources…

   SAP NetWeaver Application Server Java (Web Dynpro Java) does not sufficiently validate certain request parameters used to resolve styling resources in the application. An unauthenticated attacker could craft a malicious link…

   CVSS 6.1 CVE-2026-109810 SAP_SE