← Database

CVE-2026-58249

HIGH CVSS: 7.5 Published: 2026-10-13 Modified: 2026-10-13

Description

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malicious request that triggers a memory-handling error, causing the affected process to crash. Successful exploitation can therefore result in a high impact on the availability of the affected application. There is no impact on the confidentiality or integrity of the application.

Affected Platforms

Unknown

Weakness Type

CWE-191

References