Skip to content

CVE record · 1 source

CVE-2026-89131

CVSS 4.3

SAP NetWeaver Enterprise Portal does not sufficiently protect certain server-side actions against cross-site request forgery.

Vendor: SAP_SE
Product: SAP NetWeaver Enterprise Portal
CVSS v3.1: 4.3 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weakness: CWE-352
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

29

CVE NVD 3h ago

SAP NetWeaver Enterprise Portal does not sufficiently protect certain server-side actions against cross-site request forgery.

SAP NetWeaver Enterprise Portal does not sufficiently protect certain server-side actions against cross-site request forgery. An unauthenticated attacker could craft a malicious link that, when clicked by an authenticated user…

CVSS 4.3 CVE-2026-89131 SAP_SE