CVE-2026-120017
CriticalCVSS 10.0Summary
SAP NetWeaver AS ABAP and ABAP Platform do not sufficiently verify incoming authentication assertions under certain configurations. An unauthenticated attacker could submit crafted data to bypass authentication and impersonate arbitrary users, including privileged accounts.
Risk Assessment
The vulnerability enables authentication bypass and impersonation of any account, potentially leading to full system compromise and affecting connected components and systems.
Recommendation
Apply the SAP patch and review authentication assertion verification settings, limiting trust in external identity providers.
Other vulnerabilities in SAP NetWeaver AS ABAP
See all- CVE-2025-42902Medium
Due to the memory corruption vulnerability in SAP NetWeaver AS ABAP and ABAP Platform, an unauthenticated attacker can send a corrupted SAP Logon Ticket or SAP Assertion Ticket to the SAP application server. This leads to a dereference of NULL which makes the work process crash. As a result, it has a low impact on the availability but no impact on the confidentiality and integrity.
- CVE-2023-24521Medium
SAP NetWeaver AS ABAP (BSP Framework) versions 700–757 do not sufficiently sanitize input, allowing an unauthenticated user to alter the current user session by injecting malicious code over the network and gain access to unintended data. This may have a limited impact on confidentiality and integrity.
Original NVD description (English source)
SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions under certain configurations. An unauthenticated attacker could submit specially crafted data to bypass authentication and impersonate arbitrary users, including privileged accounts. Successful exploitation could cause a full system compromise, with the impact potentially extending to connected components and systems beyond the affected system. This results in a high impact on confidentiality, integrity, and availability of the application.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS