CVE-2026-58237

Katalog CVE

CVSS 5.9 · Medium EPSS 0,28%

Kerentanan Missing Authorization pada sap approuter. Skor CVSS 3.1 5.9 (Medium) menurut sap.com.

Deskripsi (NVD)

WebSocket of SAP Approuter does not perform sufficient authorization checks in certain functionality. An attacker with low privileges could exploit this to access restricted functionality. Successful exploitation could allow the attacker to read sensitive information and perform limited modifications, resulting in a high impact on confidentiality and a low impact on integrity. There is no impact on availability.

Rincian

Terbit di NVD

11 Agustus 2026

Terakhir diubah

8 September 2026

Status NVD

Analyzed

CVSS 3.1

5.9 (Medium), sumber sap.com
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-862: Missing Authorization

EPSS (30 hari)

0,28% peluang dieksploitasi; lebih tinggi dari 18,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://url.sap/sapsecuritypatchday advisory vendor
• https://me.sap.com/notes/3786038 permissions required