CVE-2026-89115

SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection. An attacker with high privileges and local access could inspect the memory to recover credentials and reuse them for authentication. This results in a high impact on...

CVE-2026-89115

The SAP Start Service and SAP Management Console store sensitive credential information in process memory without adequate protection. This vulnerability allows an attacker with high privileges and local access to inspect the memory, recover credentials, and reuse them for authentication. This fl...

EUVD-2026-120664

SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection. An attacker with high privileges and local access could inspect the memory to recover credentials and reuse them for authentication. This results in a high impact on...

CVE-2026-89115 Information Disclosure vulnerability in SAP Start Service and SAP Microsoft Management Console

SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection. An attacker with high privileges and local access could inspect the memory to recover credentials and reuse them for authentication. This results in a high impact on...

CVE-2026-89115: SAP_SE SAP Start Service and SAP Microsoft Management Console: SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection

SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection. An attacker with high privileges and local access could inspect the memory to recover credentials and reuse them for authentication. This results in a high impact on...

PT-2026-141282

SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection. An attacker with high privileges and local access could inspect the memory to recover credentials and reuse them for authentication. This results in a high impact on...

CVE-2023-27498

SAP Host Agent SAPOSCOL - version 7.22, allows an unauthenticated attacker with network access to a server port assigned to the SAP Start Service to submit a crafted request which results in a memory corruption error. This error can be used to reveal but not modify any technical information about...

CVE-2023-27498

SAP Host Agent SAPOSCOL - version 7.22, allows an unauthenticated attacker with network access to a server port assigned to the SAP Start Service to submit a crafted request which results in a memory corruption error. This error can be used to reveal but not modify any technical information about...

PT-2023-21173 · Sap · Sap Host Agent

Name of the Vulnerable Software and Affected Versions: SAP Host Agent SAPOSCOL version 7.22 Description: The issue allows an unauthenticated attacker with network access to a server port assigned to the SAP Start Service to submit a crafted request, resulting in a memory corruption error. This...