Skip to content

CVE record · 1 source

CVE-2026-109811

CVSS 6.5

An internal ABAP HTTP component in SAP NetWeaver and ABAP Platform (Application Server ABAP) has SSRF vulnerability due to insecure default settings.

Vendor: SAP_SE
Product: SAP NetWeaver and ABAP Platform (Application Server ABAP)
CVSS v3.1: 6.5 AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N
Weakness: CWE-918
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

29

CVE NVD 3h ago

An internal ABAP HTTP component in SAP NetWeaver and ABAP Platform (Application Server ABAP) has SSRF vulnerability due to insecure default settings.

An internal ABAP HTTP component in SAP NetWeaver and ABAP Platform (Application Server ABAP) has SSRF vulnerability due to insecure default settings. An authenticated attacker with low privileges could trick the victim to…

CVSS 6.5 CVE-2026-109811 SAP_SE