CVE-2026-58249

Description

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malicious request that triggers a memory-handling error, causing the affected process to crash. Successful exploitation can therefore result in a high impact on the availability of the affected application. There is no impact on the confidentiality or integrity of the application.

Traduire en français

Produits concernés

• SAP_SE SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)

Scores CVSS

Faiblesses (CWE)

• CWE-191

Références

• https://me.sap.com/notes/3765424
• https://url.sap/sapsecuritypatchday

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories