CVE-2026-76968

mediumPriorität · verfolgen · 26EPSS 0.004 · 33. PerzentilNL

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.39% (33rd) EPSS

CVSS 6.5 · medium

Is it mine?

20 products

Prüfe deine Angriffsfläche

Who says so?

1 sources

ncsc_nl

EPSS · bewertet 2026-10-27

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting in information disclosure. This disclosed information could potentially be used to facilitate further attacks. This vulnerability has a high impact on the confidentiality of the application, with no impact on integrity or availability.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nprimary · cna@sap.comAusnutzbarkeit 2.8 · Auswirkung 3.6

v3.16mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · NCSC-NL NL

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-497USCWE-497US

betroffene Produkte (20)

Betroffene Produkte und Versionsbereiche.

SAP Content Server, Internet Communication Manager, Web Dispatcher≤ vers:unknown/*ncsc_nlNL
SAP Extended Passport Processing≤ vers:unknown/*ncsc_nlNL
SAP GUI for Java≤ vers:unknown/*ncsc_nlNL
SAP Integration Suite≤ vers:unknown/*ncsc_nlNL
SAP Manufacturing Integration and Intelligence≤ vers:unknown/*ncsc_nlNL
SAP NetWeaver≤ vers:unknown/*ncsc_nlNL
SAP NetWeaver Business Client≤ vers:unknown/*ncsc_nlNL
SAP NetWeaver Message Server≤ vers:unknown/*ncsc_nlNL
SAP S4HANA≤ vers:unknown/*ncsc_nlNL
SAP SAP Software≤ vers:unknown/*ncsc_nlNL
SAP_SE SAP ABAP Developer Tools≤ vers:unknown/*ncsc_nlNL
SAP_SE SAP Cloud Application Programming Model (CAP)≤ vers:unknown/*ncsc_nlNL
SAP_SE SAP Extended Passport (EPP) Processing≤ vers:unknown/*ncsc_nlNL
SAP_SE SAP Integration Suite≤ vers:unknown/*ncsc_nlNL
SAP_SE SAP Manufacturing Integration and Intelligence≤ vers:unknown/*ncsc_nlNL
SAP_SE SAP NetWeaver (Message Server)≤ vers:unknown/*ncsc_nlNL
SAP_SE SAP NetWeaver (SAP GUI for Java)≤ vers:unknown/*ncsc_nlNL
SAP_SE SAP NetWeaver Business Client≤ vers:unknown/*ncsc_nlNL
SAP_SE SAP S/4HANA (Intercompany Matching and Reconciliation)≤ vers:unknown/*ncsc_nlNL
SAP_SE SAP Web Dispatcher, Internet Communication Manager and SAP Content Server≤ vers:unknown/*ncsc_nlNL

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

NCSC-2026-0356Kwetsbaarheden verholpen in diverse SAP-productenNL2026-09-09csaf · ncsc_nlNL
SAP heeft kwetsbaarheden verholpen in SAP Extended Passport Protocol (EPP) processing library, SAP NetWeaver Message Server, @sap/cds-mtxs NPM library, SAP GUI for Java, SAP ABAP Development Tools voor SAP NetWeaver AS ABAP, SAP Integration Suite, SAP NetWeaver Business Client, SAP Web Dispatcher, Internet Communication Manager, SAP Content Server, SAP S/4HANA Intercompany Matching and Reconciliation module, en SAP Manufacturing Integration and Intelligence.

quellen

Welche Quellen diesen Datensatz belegen und wann.

ncsc_nl NVD CVE.org MITRE

veröffentlicht 2026-09-08geändert 2026-09-08

Referenzen (2) nvd

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan