GHSA-6qjf-q29q-rpf3HighCVSS 7.6

SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain...

Published
November 10, 2026
Last Modified
November 10, 2026

🔗 CVE IDs covered (1)

📋 Description

SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain administrative functionality. In the context of SAP HANA XSA Web Dispatcher, an unauthenticated attacker could trick a logged-on administrator into visiting a malicious link. Visiting the link could cause unintended actions in the administrator's session. Successful exploitation could lead to a temporary compromise of the SAP HANA XSA Web Dispatcher, resulting in a high impact on confidentiality, and partial impact on integrity, and availability.

🔗 References (4)