Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_approuter:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Approuter (9a9dab78-337e-57e2-8dc6-59e5e9382587)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-44745 vulnerable 2026-07-29 00:52:14.610631 Open Redirect vulnerability in SAP Approuter
HIGH (8.1)
SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under certain configurations. This allows an unauthenticated remote attacker to craft a malicious link which, when clicked by a victim, could lead to unauthorized access. Successful exploitation results in a high impact to the confidentiality and integrity with no impact on the availability of the application.
Published: 2026-07-14T00:18:16.089Z
Updated: 2026-07-14T12:39:36.122Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27690 vulnerable 2026-07-29 00:35:00.363600 HTTP Request Smuggling in SAP Approuter
CRITICAL (9.1)
Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to request-response desynchronization. This could result in the exposure of user responses and cause the system to become unavailable. This leads to a high impact on confidentiality and availability.
Published: 2026-07-14T00:17:55.003Z
Updated: 2026-07-14T12:46:07.535Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.