medium2026-11-10SAP NetWeaver Application Server Java (Web Dynpro Java)CVE-2026-109810

CSS Injection in SAP NetWeaver Application Server Java (Web Dynpro Java)

SAP NetWeaver Application Server Java (Web Dynpro Java)

Vulnerability Detail

SAP lists this as a medium issue (CVSS 6.1) affecting SAP NetWeaver Application Server Java (Web Dynpro Java). Affected versions and fix details are in the official note.

Patch Action

Review SAP Note 3797108 and apply the fix it describes. Our editorial recommendation: include in your regular maintenance cycle and verify against the official note.

Patch Info

CVSS Score

6.1

SAP Note

3797108 ↗

CVE

CVE-2026-109810

Published

2026-11-10

← All patches