CVE record · 1 source
CVE-2026-58249
CVSS 7.5SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component.
- Vendor
- SAP
- Product
- NetWeaver, Solution Manager / Landscape
- CVSS
- 7.5
- EPSS
- 0.004 (p35)
- Exposure class
- Web platform, Network management
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component.
SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malicious request that triggers a…