中 6.1

SAP NetWeaver Visual Composer does not perform sufficient input validation and output encoding on...

CVE-2026-120016 SecPulse初出 11月10日 9:42

原文の説明取得元が公開している説明をそのまま載せています (多くは英語)。

SAP NetWeaver Visual Composer does not perform sufficient input validation and output encoding on certain request data. An unauthenticated attacker could craft a malicious link containing specially crafted input. If a victim clicks the link, the injected script executes in the victim's browser within the context of the affected application. This results in a low impact on confidentiality and integrity. There is no impact on availability.

出典: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

参照URL

web cna@sap.com
web cna@sap.com
web nvd.nist.gov
web github.com