MEDIUMCVSS v3.1 4.4Vulnerability
CVE-2026-89115
SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection. An attacker with high privileges and local access could inspect the memory to recover credentials and reuse them for authentication. This results in a high impact on confidentiality and no impact on integrity and availability.
Properties
- Severity
- MEDIUM
- Nvd fetched at
- 2026-11-10T23:33:48.924589+00:00
- Epss score
- 0.00173
- Cvss severity
- MEDIUM
- Cvss score
- 4.4
- Retrieved at
- 2026-11-10T23:35:20+00:00
- Last source
- FIRST EPSS
- Score
- 4.4
- Cvss version
- 3.1
- Cve id
- CVE-2026-89115
- Cvss vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
- First seen by Signal
- 2026-11-10T03:20:44+00:00
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
- Published at
- 2026-11-10T01:17:21.927
- Last modified
- 2026-11-10T22:11:23.807
- Epss percentile
- 0.0681
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph