Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wcwm-g7vg-pg73

Опубликовано: 08 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration. An unauthenticated attacker with network access to the affected service could exploit this weakness to register an unauthorized component and potentially perform unauthorized actions within the application environment, resulting in a high impact on the confidentiality, integrity, and availability of the affected system.

SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration. An unauthenticated attacker with network access to the affected service could exploit this weakness to register an unauthorized component and potentially perform unauthorized actions within the application environment, resulting in a high impact on the confidentiality, integrity, and availability of the affected system.

EPSS

Процентиль: 27%
0.00343
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-308

Связанные уязвимости

CVSS3: 9.8
nvd
2 дня назад

SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration. An unauthenticated attacker with network access to the affected service could exploit this weakness to register an unauthorized component and potentially perform unauthorized actions within the application environment, resulting in a high impact on the confidentiality, integrity, and availability of the affected system.

EPSS

Процентиль: 27%
0.00343
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-308