Filtered by vendor Sap Se Subscriptions
Filtered by product Sap Cloud Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-89111 1 Sap Se 1 Sap Cloud 2026-10-14 10 Critical
The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated.