What is GHSA-464m-h7w2-29w7?

GHSA-464m-h7w2-29w7 is a security advisory published by GitHub Security Advisories with High severity. SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with...

Which CVE IDs does GHSA-464m-h7w2-29w7 cover?

GHSA-464m-h7w2-29w7 covers the following CVE IDs: CVE-2026-23687. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-464m-h7w2-29w7?

GHSA-464m-h7w2-29w7 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-464m-h7w2-29w7HighCVSS 8.8

SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with...

Vendor

GitHub Security Advisories

Published

February 10, 2026

Last Modified

June 9, 2026

🔗 CVE IDs covered (1)

CVE-2026-23687 →

📋 Description

SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. This may result in acceptance of tampered identity information, unauthorized access to sensitive user data and potential disruption of normal system usage.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-23687
https://me.sap.com/notes/3697567
https://url.sap/sapsecuritypatchday
http://seclists.org/fulldisclosure/2026/Jun/1
https://github.com/advisories/GHSA-464m-h7w2-29w7