medium2026-10-13SAP NetWeaver Enterprise Portal — EP-RUNTIMECVE-2026-89122
Untrusted Content Loaded via Crafted Link in Enterprise Portal
SAP Enterprise Portal
Our Take
Four Enterprise Portal notes this month. Apply them as a batch rather than four change requests.
Vulnerability Detail
A crafted link can cause the portal to load untrusted content (open-redirect style behaviour). Needs a victim to click.
Patch Action
Apply SAP Note 3790401 with the other Enterprise Portal notes this month.
Affected Versions
EP-RUNTIME 7.50
Patch Info