Skip to content

CVE record · 1 source

CVE-2026-120017

CVSS 10.0

SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions under certain configurations.

Vendor: SAP_SE
Product: SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider)
CVSS v3.1: 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness: CWE-347
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

44

CVE NVD 1h ago

SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions under certain configurations.

SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions under certain configurations. An unauthenticated attacker could submit specially crafted data to bypass…

CVSS 10.0 CVE-2026-120017 SAP_SE