Description
The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts (e.g., regex patterns) and revealing underlying URI parsing logic. Leading to low impact on confidentiality. Integrity and availability are unaffected.
Published: 2026-05-26
Score: 4.3 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 26 May 2026 18:00:00 +0000

Type Values Removed Values Added
Description The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts (e.g., regex patterns) and revealing underlying URI parsing logic. Leading to low impact on confidentiality. Integrity and availability are unaffected.
Title Information Disclosure vulnerability in SAP Gateway
Weaknesses CWE-497
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: sap

Published:

Updated: 2026-05-26T18:36:16.647Z

Reserved: 2026-05-07T18:16:34.195Z

Link: CVE-2026-44749

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-05-26T18:16:51.190

Modified: 2026-05-26T18:16:51.190

Link: CVE-2026-44749

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses