2 matches found
EUVD-2026-10455
SAP NetWeaver Feedback Notifications Service contains a SQL injection vulnerability that allows an authenticated attacker to inject arbitrary SQL code through user-controlled input fields. The application concatenates these inputs directly into SQL queries without proper validation or escaping. A...
6.4CVSS6AI score0.0034EPSS
SaveExploits0References3
CVE-2026-27684: Improper Neutralization of Special Elements used in an SQL Command
SAP NetWeaver Feedback Notifications Service contains a SQL injection vulnerability that allows an authenticated attacker to inject arbitrary SQL code through user-controlled input fields. The application concatenates these inputs directly into SQL queries without proper validation or escaping. A...
6.4CVSS6.7AI score0.0034EPSS
SaveExploits0References1
20