GHSA-f9wm-r4w7-hw29HighCVSS 7.5

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted...

Published
October 13, 2026
Last Modified
October 13, 2026

🔗 CVE IDs covered (1)

📋 Description

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malicious request that triggers a memory-handling error, causing the affected process to crash. Successful exploitation can therefore result in a high impact on the availability of the affected application. There is no impact on the confidentiality or integrity of the application.

🔗 References (4)