Skip to content

CVE record · 1 source

CVE-2026-120016

CVSS 6.1

SAP NetWeaver Visual Composer does not perform sufficient input validation and output encoding on certain request data.

Vendor: SAP_SE
Product: SAP NetWeaver Visual Composer
CVSS v3.1: 6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness: CWE-79
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

29

CVE NVD 3h ago

SAP NetWeaver Visual Composer does not perform sufficient input validation and output encoding on certain request data.

SAP NetWeaver Visual Composer does not perform sufficient input validation and output encoding on certain request data. An unauthenticated attacker could craft a malicious link containing specially crafted input. If a victim…

CVSS 6.1 CVE-2026-120016 SAP_SE