Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:odata:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductOdata (5885b12b-94f6-5092-8a4c-06987f283b72)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-66773 vulnerable 2026-09-16 04:32:54.851936 Server-controlled `__next` URL is not checking cross-origin
MEDIUM (5.9)
A malicious or compromised OData service could disclose sensitive authentication information and inject untrusted data into the application, which may leads to a high impact on confidentiality and low impact on integrity and no impact on Availability.
Published: 2026-08-11T00:18:58.770Z
Updated: 2026-08-11T14:27:55.800Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.