Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rvg2-xqmh-v3qw

Опубликовано: 09 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory management, leading to memory corruption. This could lead to a high impact on the confidentiality, integrity, and availability of the application.

Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory management, leading to memory corruption. This could lead to a high impact on the confidentiality, integrity, and availability of the application.

EPSS

Процентиль: 36%
0.00437
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-121

Связанные уязвимости

CVSS3: 9.8
nvd
около 2 месяцев назад

Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory management, leading to memory corruption. This could lead to a high impact on the confidentiality, integrity, and availability of the application.

CVSS3: 9.8
fstec
около 2 месяцев назад

Уязвимость ядра SAP программных интеграционных платформ SAP NetWeaver AS ABAP и SAP NetWeaver ABAP, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 36%
0.00437
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-121