中 5.3

Due to Broken Access Control in SAP NetWeaver AS Java, an unauthenticated attacker could invoke...

CVE-2026-89128 SecPulse初出 11月10日 9:35

原文の説明取得元が公開している説明をそのまま載せています (多くは英語)。

Due to Broken Access Control in SAP NetWeaver AS Java, an unauthenticated attacker could invoke affected SOAP operations exposed over HTTP without proper access control. Successful exploitation could allow disclosure of information accessible through the affected service, resulting in a low impact on confidentiality. Integrity and availability remain unaffected.

出典: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

参照URL

web cna@sap.com
web cna@sap.com
web nvd.nist.gov
web github.com