239 matches found
CYB401-CVE-2026-58249-Analysis
CYB401-CVE-2026-58249-Analysis CVE-2026-58249: SAP NetWeaver / Web Dispatcher Memory Corruption Vulnerability Oloko Toluwalope Isaac Matric No: RUN/CYB/23/15411 CYB 401 1. INTRODUCTION CVE-2026-58249 is a high-severity memory corruption flaw in the Internet Communication Manager ICM used by SAP...
CVE-2026-97000
Null pointer dereference in Windows USM Communication Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-97000
A Null pointer dereference vulnerability exists in the Windows USM Communication Manager , which could allow an authorized attacker to achieve local privilege escalation . Technical details regarding the specific root cause or affected files are not provided in the documents. Remediation is avail...
EUVD-2026-121829
Null pointer dereference in Windows USM Communication Manager allows an authorized attacker to elevate privileges locally...
SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution
Four flaws that attackers could exploit without logging in were fixed today as part of SAP's monthly Security Patch Day—the vendor rates all four 10.0, the maximum CVSS score. Three are in the SAP NetWeaver application server, the software SAP systems run on, and one is in the Web Dispatcher, whi...
CVE-2026-89119
SAP Web Dispatcher and SAP NetWeaver Application Server ABAP Internet Communication Manager do not perform sufficient request validation in certain administrative functionality. In the context of Application Server ABAP and SAP Web Dispatcher, an unauthenticated attacker could trick a logged-on...
CVE-2026-89125
Due to Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager, an attacker with administrative privileges could obtain sensitive information from stored data. This may allow correlation of credentials across users and deployments, potentially leading to...
EUVD-2026-120702
Due to Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager, an attacker with administrative privileges could obtain sensitive information from stored data. This may allow correlation of credentials across users and deployments, potentially leading to...
CVE-2026-89125
The SAP Web Dispatcher and Internet Communication Manager are affected by a vulnerability involving the Insecure Storage of Sensitive Information . An attacker possessing administrative privileges can extract sensitive information from stored data, which may lead to the correlation of credentials...
CVE-2026-89125 Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager
Due to Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager, an attacker with administrative privileges could obtain sensitive information from stored data. This may allow correlation of credentials across users and deployments, potentially leading to...
CVE-2026-109793 Denial of Service (DoS) vulnerability in SAP NetWeaver Application Server ABAP (Internet Communication Manager) and SAP Web Dispatcher
SAP NetWeaver Application Server ABAP and SAP Web Dispatcher do not sufficiently validate certain header values processed during inbound request handling. An unauthenticated attacker could send a specially crafted request to cause the affected process to become unavailable.This results in a high...
CVE-2026-89119
SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) are affected by a Cross-Site Request Forgery (CSRF) vulnerability (CWE-352) due to insufficient request validation in specific administrative functionalities. An unauthenticated attacker can trick a logg...
EUVD-2026-120665
SAP Web Dispatcher and SAP NetWeaver Application Server ABAP Internet Communication Manager do not perform sufficient request validation in certain administrative functionality. In the context of Application Server ABAP and SAP Web Dispatcher, an unauthenticated attacker could trick a logged-on...
CVE-2026-89119 Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communication Manager
SAP Web Dispatcher and SAP NetWeaver Application Server ABAP Internet Communication Manager do not perform sufficient request validation in certain administrative functionality. In the context of Application Server ABAP and SAP Web Dispatcher, an unauthenticated attacker could trick a logged-on...
CVE-2026-76964 Memory Corruption Vulnerability in SAP NetWeaver AS ABAP (Internet Communication Manager)
SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Successful exploitation...
PT-2026-141284
Due to Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager, an attacker with administrative privileges could obtain sensitive information from stored data. This may allow correlation of credentials across users and deployments, potentially leading to...
CVE-2026-109793: SAP_SE SAP NetWeaver Application Server ABAP (Internet Communication Manager) and SAP Web Dispatcher: SAP NetWeaver Application Server ABAP and SAP Web Dispatcher do not sufficiently validate certain header values…
SAP NetWeaver Application Server ABAP and SAP Web Dispatcher do not sufficiently validate certain header values processed during inbound request handling. An unauthenticated attacker could send a specially crafted request to cause the affected process to become unavailable.This results in a high...
PT-2026-144383
Null pointer dereference in Windows USM Communication Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-89125: SAP_SE SAP Web Dispatcher and Internet Communication Manager: Due to Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager, an attacker…
Due to Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager, an attacker with administrative privileges could obtain sensitive information from stored data. This may allow correlation of credentials across users and deployments, potentially leading to...
CVE-2026-89119: SAP_SE SAP Web Dispatcher and Internet Communication Manager: SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) do not perform sufficient…
SAP Web Dispatcher and SAP NetWeaver Application Server ABAP Internet Communication Manager do not perform sufficient request validation in certain administrative functionality. In the context of Application Server ABAP and SAP Web Dispatcher, an unauthenticated attacker could trick a logged-on...