medium2026-10-13SAP NetWeaver Enterprise Portal — EP-RUNTIMECVE-2026-89118
Information Disclosure via Anonymous Portal Endpoints
SAP Enterprise Portal
Our Take
Anonymous access is the interesting part. Low impact individually, useful to an attacker doing reconnaissance.
Vulnerability Detail
Certain portal endpoints reachable without logging in disclose information.
Patch Action
Apply SAP Note 3789825 with the other Enterprise Portal notes.
Affected Versions
EP-RUNTIME 7.50
Patch Info