Filtered by vendor Sap Se
Subscriptions
Filtered by product Sap Approuter
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-27690 | 1 Sap Se | 1 Sap Approuter | 2026-07-27 | 9.1 Critical |
| Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to request-response desynchronization. This could result in the exposure of user responses and cause the system to become unavailable. This leads to a high impact on confidentiality and availability. | ||||
| CVE-2026-44745 | 1 Sap Se | 1 Sap Approuter | 2026-07-27 | 8.1 High |
| SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under certain configurations. This allows an unauthenticated remote attacker to craft a malicious link which, when clicked by a victim, could lead to unauthorized access. Successful exploitation results in a high impact to the confidentiality and integrity with no impact on the availability of the application. | ||||
Page 1 of 1.