CVE-2026-58230highCWE-601

CVE-2026-58230: fallo de gravedad alta en SAP_SE SAP Business AI Platform (Approuter)

Multiple vulnerabilities in SAP Business AI Platform (Approuter)

Publicada el

Seguir esta CVE+ Monitorear SAP Business AI Platform+ Monitorear @sap/approuter

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7epss 0.3%
SAP Approuter does not sufficiently validate certain token content under specific configurations. An unauthenticated attacker could send a specially crafted token to cause sensitive credential material to be sent to an attacker-controlled destination. The attack complexity is high due to non-default preconditions required in the target environment. This results in a high impact on confidentiality and a low impact on integrity and availability.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
Productos afectados
SAP_SE · SAP Business AI Platform (Approuter)
CVEs relacionadas — SAP_SE SAP Business AI Platform (Approuter)

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-66777MEDIUMMultiple vulnerabilities in SAP Business AI Platform (Approuter)EPSS 0.4%CVE-2026-58238MEDIUMMultiple vulnerabilities in SAP Business AI Platform (Approuter)EPSS 0.4%CVE-2026-66761MEDIUMMultiple vulnerabilities in SAP Business AI Platform (Approuter)EPSS 0.4%CVE-2026-66778MEDIUMMultiple vulnerabilities in SAP Business AI Platform (Approuter)EPSS 0.4%CVE-2026-66774LOWMultiple vulnerabilities in SAP Business AI Platform (Approuter)EPSS 0.4%CVE-2026-58239LOWMultiple vulnerabilities in SAP Business AI Platform (Approuter)EPSS 0.3%