Skip to content
CVE PROGRAM SOURCE RECORD2.2 Low

CVE-2026-58234

Denial of Service vulnerability in SAP Process Integration (SOAP Adapter)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact on availability with no impact on confidentiality and integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Process Integration (SOAP Adapter)

Default version status: unaffected

  • MESSAGING 7.50affected
  • SAP_XIAF 7.50affected

References