CVEvulnerability
CVE-2026-58235
6.3 MEDIUM
Official page ↗
- Status
- Awaiting Analysis
- Published
- 2026-08-11
- Last modified
- 2026-10-24
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Description
SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed in later versions. A low-privileged authenticated attacker could potentially leverage these weaknesses against the affected component, though no specific exploit is currently known. Successful exploitation could result in low impact on confidentiality, integrity, and availability of the system.
References
- https://me.sap.com/notes/3758318 me.sap.com
- https://url.sap/sapsecuritypatchday url.sap