Vulnetix
Try Vulnetix Request Demo
CVE-2026-23685 PUBLISHED CVSS 4.400000095367432 MEDIUM

Due to a Deserialization vulnerability in SAP NetWeaver (JMS service), an attacker authenticated as an administrator with local access could submit specially crafted content to the server. If processed by the application, this content could trigger unintended behavior during internal logic execution, potentially causing a denial of service. Successful exploitation results in a high impact on availability, while confidentiality and integrity remain unaffected.

EPSS 0.11% · 29.7th percentile

Risk Scores

CVSS v3.1
4.400000095367432
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.11%
29.7th percentile

Affected Products

VendorProductVersions
sapnetweaver7.50
SAP_SESAP NetWeaver (JMS service)J2EE-FRMW 7.50

Timeline

References

Open in Interactive Console →