CVE-2026-89118

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-critical application information, which leads to Low impact on Confidentiality, but there is no impact on Integrity and Availability of the application.

Score

CVSS 3.1 5.3 Medium

Status

Awaiting Analysis - cna@sap.com

Published

2026-10-13

Last modified

2026-10-15

Weaknesses

CWE-552

Affected products

• Sap Netweaver Enterprise Portal (Sap Se)

References

• https://me.sap.com/notes/3789825
• https://url.sap/sapsecuritypatchday