Skip to content

CVE record · 1 source

CVE-2026-89111

CVSS 10.0

The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications.

Vendor: SAP
CVSS: 10.0

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

18

CVE NVD 19d ago

The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications.

The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled…

CVSS 10.0 CVE-2026-89111 SAP