Sap Cloud Application Programming Model (Cap)
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_cloud_application_programming_model_(cap):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Cloud Application Programming Model (Cap) (632d23ec-8632-5e6a-8b16-959d55d90fd4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-76969 |
vulnerable | 2026-09-16 04:32:47.842224 |
Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)
CRITICAL (9.4)
@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data. Successful exploitation can result in a high impact on availability and integrity of the application. There may also be partial impact to the confidentiality of business data.
Published: 2026-09-08T00:12:55.725Z
Updated: 2026-09-08T10:34:58.085Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.