PT-2026-70029 · Sap · Sap Approuter
CVE-2026-58237
·
Published
2026-08-11
·
Updated
2026-08-11
CVSS v3.1
5.9
Medium
| Vector | AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
SAP Approuter (affected versions not specified)
Description
The WebSocket component of SAP Approuter fails to perform sufficient authorization checks within certain functionality. This allows an attacker with low privileges to access restricted features, potentially leading to the disclosure of sensitive information and limited unauthorized modifications.
Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sap Approuter