CVE-2022-26103

Under certain conditions, SAP NetWeaver (Real Time Messaging Framework) - version 7.50, allows an attacker to access information which could lead to information gathering for further exploits and attacks.

Score

CVSS 3.1 5.3 Medium

Status

Modified - cna@sap.com

Published

2022-03-10

Last modified

2024-08-03

Weaknesses

CWE-862

Affected products

• Netweaver Application Server Java (Sap)
• Sap Netweaver Real Time Messaging Framework (Sap Se)

References

• https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10
• https://launchpad.support.sap.com/#/notes/3132360