Sap Approuter (Sap Se) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-07-14. Vendor: Sap Se.

CVEs of Sap Approuter

• CVE-2026-44745 - CVSS 8.1 (high), 2026-07-14: SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under certain configurations. This allows an unauthenticated…
• CVE-2026-27690 - CVSS 9.1 (critical), 2026-07-14: Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to…