CVE-2026-58238

概要

参考情報

• me.sap.com/notes/3786038 · Permissions Required
• url.sap/sapsecuritypatchday · Vendor Advisory

approuter のその他の脆弱性

• CVE-2026-66778中 5.3SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. An unauthenticated at…
• CVE-2026-66777中 5.9SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations. Due to the complexity…
• CVE-2026-66776中 5.9SAP Approuter does not consistently enforce integrity verification on certain session-related request headers under specific conditions. An …
• CVE-2026-66775中 4.3SAP Approuter does not enforce cross-site request forgery protection on the authentication flow by default. An unauthenticated attacker coul…
• CVE-2026-66774低 3.7SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this under a non-default …