Skip to content

CVE record · 1 source

CVE-2026-89114

CVSS 7.5

SAP NetWeaver AS Java EDM Application does not perform an authentication check for certain web service requests.

Vendor: SAP_SE
Product: SAP NetWeaver AS Java EDM Application
CVSS v3.1: 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-862
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

36

CVE NVD 1h ago

SAP NetWeaver AS Java EDM Application does not perform an authentication check for certain web service requests.

SAP NetWeaver AS Java EDM Application does not perform an authentication check for certain web service requests. An unauthenticated attacker could send a specially crafted request to retrieve sensitive business information. This…

CVSS 7.5 CVE-2026-89114 SAP_SE