sap netweaver-application-server-java CVE-2022-26103 is a vulnerability in SAP Netweaver Application Server Java
Published on March 10, 2022

Under certain conditions, SAP NetWeaver (Real Time Messaging Framework) - version 7.50, allows an attacker to access information which could lead to information gathering for further exploits and attacks.

NVD

Weakness Type

What is an AuthZ Vulnerability?

The software does not perform an authorization check when an actor attempts to access a resource or perform an action.

CVE-2022-26103 has been classified to as an AuthZ vulnerability or weakness.


Products Associated with CVE-2022-26103

Want to know whenever a new CVE is published for SAP Netweaver Application Server Java? stack.watch will email you.

 

Affected Versions

SAP SE SAP NetWeaver (Real Time Messaging Framework) Version < 7.50 is affected by CVE-2022-26103

Exploit Probability

EPSS
0.18%
Percentile
39.06%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.