MEDIUMCVSS v3.1 6.5Vulnerability
CVE-2026-109811
An internal ABAP HTTP component in SAP NetWeaver and ABAP Platform (Application Server ABAP) has SSRF vulnerability due to insecure default settings. An authenticated attacker with low privileges could trick the victim to interact with a malicious server which allows the attacker to access sensitive information belonging to the victim and modify limited non-sensitive information. This results in a high impact on confidentiality and low impact on integrity. Availability is not impacted.
Properties
- Severity
- MEDIUM
- Nvd fetched at
- 2026-11-10T23:33:48.924589+00:00
- Epss score
- 0.00175
- Cvss severity
- MEDIUM
- Cvss score
- 6.5
- Retrieved at
- 2026-11-10T23:35:17+00:00
- Last source
- FIRST EPSS
- Score
- 6.5
- Cvss version
- 3.1
- Cve id
- CVE-2026-109811
- Cvss vector
- CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N
- First seen by Signal
- 2026-11-10T03:20:44+00:00
- Vector
- CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N
- Published at
- 2026-11-10T01:17:15.607
- Last modified
- 2026-11-10T22:11:23.807
- Epss percentile
- 0.07
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph