Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2026-44749

Information Disclosure vulnerability in SAP Gateway

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts (e.g., regex patterns) and revealing underlying URI parsing logic. Leading to low impact on confidentiality. Integrity and availability are unaffected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Gateway

Default version status: unaffected

  • SAP_GWFND 750affected
  • 751affected
  • 752affected
  • 753affected
  • 754affected
  • 755affected
  • 756affected
  • 757affected
  • 758affected
  • SAP_BASIS 795affected

References