Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_application_server_abap_for_sap_netweaver_and_abap_platform:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Application Server Abap For Sap Netweaver And Abap Platform (5b25ac9d-7513-5a04-8cd6-8abb0ecf0321)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-40129 vulnerable 2026-06-08 08:01:19.924570 Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform
MEDIUM (4.3)
Due to a Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform, an authenticated attacker could send specially crafted inputs to the application. If processed by the application, this input could be delivered to users subscribed to the channel and result in execution. Successful exploitation could enable the attacker to execute arbitrary code for other users, resulting in a low impact on the integrity, with no impact to the confidentiality and availability of the system.
Published: 2026-05-12T02:20:45.186Z
Updated: 2026-05-12T13:10:39.638Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.