CVE-2026-0510: Obsolete Encryption Algorithm Used in NW AS Java UME User Mapping
The User Management Engine (UME) in NetWeaver Application Server for Java (NW AS Java) utilizes an obsolete cryptographic algorithm for encrypting User Mapping data. This weakness could allow an attacker with high-privileged access to exploit the vulnerability under specific conditions potentially leading to partial disclosure of sensitive information.This has low impact on confidentiality with no impact on integrity and availability of the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0510?
CVE-2026-0510 has a high severity rating due to the use of an obsolete encryption algorithm that could be exploited by attackers with high-privileged access.
How do I fix CVE-2026-0510?
To fix CVE-2026-0510, upgrade to the latest version of SAP NetWeaver Application Server for Java that addresses this encryption vulnerability.
What systems are affected by CVE-2026-0510?
CVE-2026-0510 affects the SAP NetWeaver Application Server for Java, specifically its User Management Engine component.
What is the impact of CVE-2026-0510?
The impact of CVE-2026-0510 includes potentially unauthorized access to sensitive user mapping data due to inadequate encryption.
Who should be concerned about CVE-2026-0510?
Organizations using SAP NetWeaver Application Server for Java should be concerned about CVE-2026-0510 and take immediate steps to remediate it.