← Database

CVE-2026-109793

HIGH CVSS: 7.5 Published: 2026-11-10 Modified: 2026-11-10

Description

SAP NetWeaver Application Server ABAP and SAP Web Dispatcher do not sufficiently validate certain header values processed during inbound request handling. An unauthenticated attacker could send a specially crafted request to cause the affected process to become unavailable.This results in a high impact on availability. There is no impact on confidentiality and integrity.

Affected Platforms

Unknown

Weakness Type

CWE-121

References