CVE record · 1 source
CVE-2026-89110
CVSS 9.9SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality.
- Vendor
- SAP, PHP
- Product
- NetWeaver, PHP
- CVSS
- 9.9
- EPSS
- 0.004 (p34)
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality.
SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low privileges could invoke internal operations on a preconfigured remote system. Depending on the…