[SYSS-2026-004] SAP NetWeaver SAML XML Signature Wrapping

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-06-09 05:31 UTC
Importiert: 2026-06-16 07:20 UTC
Quelle-ID: full_disc
uid_hash: f29ee1287137879a345fb5cc951676b58ed2aecf1330efee45082cb3e50d938f

Full Disclosure

Posted by Moritz Bechler via Fulldisclosure on Jun 08 Advisory ID: SYSS-2026-004

Product: SAP NetWeaver ABAP / SAP_BASIS

Manufacturer: SAP SE

Affected Version(s): SAP_BASIS 700 - 918

Tested Version(s): 7.93 Patch 300

Vulnerability Type: CWE-347: Improper Verification of Cryptographic Signature

Risk Level: High

Solution Status: Fixed

Manufacturer Notification: 2025-11-06

Solution Date: 2026-02-10...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss