CVE-2026-58234: Denial of Service vulnerability in SAP Process Integration (SOAP Adapter)
SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact on availability with no impact on confidentiality and integrity.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs privileged access and must be able to send specially crafted requests to the SAP Process Integration SOAP Adapter. The attack complexity is high, and no user interaction is required.
What is the expected impact if exploitation succeeds?
Successful exploitation can temporarily increase processor load and degrade system responsiveness. The stated impact is limited to low availability impact; confidentiality and integrity are not affected.
How can exposure be reduced if patching is delayed?
The provided information identifies privileged users sending crafted SOAP Adapter requests as the exploitation path. Restrict privileged access and limit the ability to send untrusted or specially crafted requests to the SOAP Adapter where operationally possible.