中 5.8

Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS Java (Web Services)...

CVE-2026-89129 SecPulse初出 11月10日 9:35

原文の説明取得元が公開している説明をそのまま載せています (多くは英語)。

Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS Java (Web Services), an unauthenticated attacker could craft a SOAP request that causes the server to return a SOAP fault to a URL under the attacker�s control. Successful exploitation could allow the attacker to disclose information about connected systems, impacting confidentiality, while integrity and availability remain unaffected.

出典: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

参照URL

web cna@sap.com
web cna@sap.com
web nvd.nist.gov
web github.com