中 6.5

An internal ABAP HTTP component in SAP NetWeaver and ABAP Platform (Application Server ABAP) has...

CVE-2026-109811 SecPulse初出 11月10日 9:41

原文の説明取得元が公開している説明をそのまま載せています (多くは英語)。

An internal ABAP HTTP component in SAP NetWeaver and ABAP Platform (Application Server ABAP) has SSRF vulnerability due to insecure default settings. An authenticated attacker with low privileges could trick the victim to interact with a malicious server which allows the attacker to access sensitive information belonging to the victim and modify limited non-sensitive information. This results in a high impact on confidentiality and low impact on integrity. Availability is not impacted.

出典: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

参照URL

web cna@sap.com
web cna@sap.com
web nvd.nist.gov
web github.com