SAP NetWeaver AS Java Vulnerable Third-Party Component (3758318)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(335408);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/08/14");

  script_cve_id("CVE-2026-58235");
  script_xref(name:"IAVA", value:"2026-A-0825");

  script_name(english:"SAP NetWeaver AS Java Vulnerable Third-Party Component (3758318)");

  script_set_attribute(attribute:"synopsis", value:
"The remote SAP NetWeaver AS Java server is affected by a vulnerability in a bundled third-party component.");
  script_set_attribute(attribute:"description", value:
"The version of SAP NetWeaver Application Server Java detected on the remote host is affected by the use of a vulnerable
third-party component as referenced in SAP Security Note 3758318:

  - SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and
    data transfer libraries that contain known vulnerabilities addressed in later versions. A low-privileged
    authenticated attacker could potentially leverage these weaknesses against the affected component, though
    no specific exploit is currently known. Successful exploitation could result in low impact on
    confidentiality, integrity, and availability of the system. (CVE-2026-58235)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  # https://support.sap.com/en/my-support/knowledge-base/security-notes-news/august-2026.html
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?0b3f7da5");
  script_set_attribute(attribute:"see_also", value:"https://me.sap.com/notes/3758318");
  script_set_attribute(attribute:"solution", value:
"Apply the appropriate patch according to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-58235");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/08/11");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/08/11");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/08/14");

  script_set_attribute(attribute:"potential_vulnerability", value:"true");
  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:sap:netweaver_application_server");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Web Servers");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("sap_netweaver_as_web_detect.nbin");
  script_require_keys("installed_sw/SAP Netweaver Application Server (AS)", "Settings/ParanoidReport");
  script_require_ports("Services/www", 80, 443, 8000, 50000);

  exit(0);
}

include('vcf_extras_sap.inc');

if (report_paranoia < 2) audit(AUDIT_PARANOID);

var app_info = vcf::sap_netweaver_as::get_app_info();

var fix = 'See vendor advisory';
var constraints = [
  {'equal' : '7.50', 'fixed_display' : fix }
];

vcf::sap_netweaver_as::check_version_and_report(
  app_info:app_info,
  constraints:constraints,
  severity:SECURITY_WARNING
);