medium2026-11-10SAP NetWeaver AS Java (Web Services)CVE-2026-89129

Server-Side Request Forgery in SAP NetWeaver AS Java (Web Services)

SAP NetWeaver AS Java (Web Services)

Vulnerability Detail

SAP lists this as a medium issue (CVSS 5.8) affecting SAP NetWeaver AS Java (Web Services). Affected versions and fix details are in the official note.

Patch Action

Review SAP Note 3835738 and apply the fix it describes. Our editorial recommendation: include in your regular maintenance cycle and verify against the official note.

Patch Info

CVSS Score

5.8

SAP Note

3835738 ↗

CVE

CVE-2026-89129

Published

2026-11-10

← All patches