Skip to content

CVE record · 1 source

CVE-2026-120014

CVSS 7.6

SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain administrative functionality.

Vendor: SAP_SE
Product: SAP Web Dispatcher and Internet Communication Manager
CVSS v3.1: 7.6 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Weakness: CWE-352
Exposure class: Database, Network management

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

36

CVE NVD 1h ago

SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain administrative functionality.

SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain administrative functionality. In the context of SAP HANA XSA Web Dispatcher, an unauthenticated attacker could trick a logged-on administrator…

CVSS 7.6 CVE-2026-120014 SAP_SE