CVE record · 1 source
CVE-2026-120008
CVSS 8.2SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests.
- Vendor
- SAP_SE
- Product
- SAP NetWeaver (Internet Graphics Service)
- CVSS v3.1
- 8.2 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
- Weakness
- CWE-787
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests.
SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request to trigger an out-of-bounds memory write in a…