← Database

CVE-2026-109800

HIGH CVSS: 7.7 Published: 2026-11-10 Modified: 2026-11-10

Description

SAP Web Dispatcher does not sufficiently validate certain inputs during processing, which could lead to memory corruption. An attacker authenticated as a non-administrative user could exploit this vulnerability by providing specially crafted input, causing the Web Dispatcher process to terminate without user interaction. As a result, the Web Dispatcher and all backend systems reachable through it become unavailable, leading to a high impact on availability. There is no impact on confidentiality or integrity of the application.

Affected Platforms

Unknown

Weakness Type

CWE-121

References