CVE-2026-109810

The SAP NetWeaver Application Server Java (Web Dynpro Java) contains a vulnerability where certain request parameters used to resolve styling resources are not sufficiently validated. An unauthenticated attacker can craft a malicious link that, if clicked by an authenticated victim , forces the b...

EUVD-2026-120692

SAP NetWeaver Application Server Java Web Dynpro Java does not sufficiently validate certain request parameters used to resolve styling resources in the application. An unauthenticated attacker could craft a malicious link that, when clicked by an authenticated victim, causes the victim's browser...