Skip to content

CVE record · 1 source

CVE-2026-120010

CVSS 7.5

SAP NetWeaver Application Server (SAP Message Server) does not properly size memory allocations when handling certain HTTP requests.

Vendor: SAP_SE
Product: SAP NetWeaver Application Server (SAP Message Server)
CVSS v3.1: 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-131
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

36

CVE NVD 1h ago

SAP NetWeaver Application Server (SAP Message Server) does not properly size memory allocations when handling certain HTTP requests.

SAP NetWeaver Application Server (SAP Message Server) does not properly size memory allocations when handling certain HTTP requests. An unauthenticated attacker could send a specially crafted request to trigger a heap buffer…

CVSS 7.5 CVE-2026-120010 SAP_SE