GHSA-g38v-q6rh-qwr8HighCVSS 8.9

Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of...

Published
November 10, 2026
Last Modified
November 10, 2026

🔗 CVE IDs covered (1)

📋 Description

Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory management, leading to memory corruption. This could lead to a high impact on confidentiality and integrity with low impact on availability of the application.

🔗 References (4)