medium2026-11-10SAP NetWeaver Visual ComposerCVE-2026-120016

Cross-Site Scripting in SAP NetWeaver Visual Composer

SAP NetWeaver Visual Composer

Vulnerability Detail

SAP lists this as a medium issue (CVSS 6.1) affecting SAP NetWeaver Visual Composer. Affected versions and fix details are in the official note.

Patch Action

Review SAP Note 3806484 and apply the fix it describes. Our editorial recommendation: include in your regular maintenance cycle and verify against the official note.

Patch Info

CVSS Score

6.1

SAP Note

3806484 ↗

CVE

CVE-2026-120016

Published

2026-11-10

← All patches