CVE-2026-89118: Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-critical application information, which leads to Low impact on Confidentiality, but there is no impact on Integrity and Availability of the application.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated attacker can exploit it remotely; no credentials or user interaction are required.
What is the impact if exploitation succeeds?
The attacker may access restricted resources and retrieve non-critical application information. The stated impact is limited to confidentiality; integrity and availability are not affected.
How can I tell whether my portal is exposed?
A portal is exposed if an unauthenticated request can access resources that should be restricted and return application information. The provided data does not identify specific affected versions or resource paths.