Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-58249

Memory Corruption vulnerability in SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malicious request that triggers a memory-handling error, causing the affected process to crash. Successful exploitation can therefore result in a high impact on the availability of the affected application. There is no impact on the confidentiality or integrity of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)

Default version status: unaffected

  • HDB 2.00affected
  • KRNL64UC 7.53affected
  • WEBDISP 7.53affected
  • 7.54affected
  • 7.77affected
  • 7.93affected
  • 9.16affected
  • XS_ADVANCED_RUNTIME 1.00affected
  • SAP_EXTENDED_APP_SERVICES 1affected
  • CONTSERV 7.53affected
  • KERNEL 7.53affected
  • 9.18affected
  • 9.19affected
  • 9.20affected

References