Due to Broken Access Control in SAP NetWeaver AS Java, an unauthenticated attacker could invoke affected SOAP operations exposed over HTTP without…
Due to Broken Access Control in SAP NetWeaver AS Java, an unauthenticated attacker could invoke affected SOAP operations exposed over HTTP without proper access control. Successful exploitation could allow disclosure of information accessible through the affected service, resulting in a low impact on confidentiality. Integrity and availability remain unaffected.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- SAP_SE
- Product
- SAP NetWeaver AS Java (Process Integration Test Tool)
- CVSS v3.1
- 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weakness
- CWE-862
- Exposure class
- Web platform
- NVD status
- Received
Why it ranks 29 (Notable)
- CVSS v3.1 5.3 medium
- Product class: web platform
- Widely deployed vendor product (SAP_SE)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-89128 on this site · NVD · CVE.org · Vulnpedia