{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-13T00:22:30.074","vulnerabilities":[{"cve":{"id":"CVE-2026-24316","sourceIdentifier":"cna@sap.com","published":"2026-03-10T17:35:55.860","lastModified":"2026-06-03T18:55:32.010","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"SAP NetWeaver Application Server for ABAP provides an ABAP Report for testing purposes, which allows to send HTTP requests to arbitrary internal or external endpoints. The report is therefore vulnerable to Server-Side Request Forgery (SSRF). Successful exploitation could lead to interaction with potentially sensitive internal endpoints, resulting in a low impact on data confidentiality and integrity. There is no impact on availability of the application."},{"lang":"es","value":"SAP NetWeaver Servidor de aplicaciones para ABAP proporciona un informe ABAP para fines de prueba, que permite enviar peticiones HTTP a puntos finales internos o externos arbitrarios. El informe es, por lo tanto, vulnerable a Falsificación de petición del lado del servidor (SSRF). La explotación exitosa podría conducir a interacción con puntos finales internos potencialmente sensibles, lo que resulta en un bajo impacto en la confidencialidad e integridad de los datos. No hay impacto en la disponibilidad de la aplicación."}],"metrics":{"cvssMetricV31":[{"source":"cna@sap.com","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":2.7}]},"weaknesses":[{"source":"cna@sap.com","type":"Primary","description":[{"lang":"en","value":"CWE-918"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:sap_basis:*:*:*","matchCriteriaId":"8E96C58C-ED44-487B-A67E-FDAE3C29023A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:sap_basis:*:*:*","matchCriteriaId":"A14DF5EB-B8CE-4A47-9959-2F65A5DCEF5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:sap_basis:*:*:*","matchCriteriaId":"419BA423-0803-4F51-8889-014A521F02CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:sap_basis:*:*:*","matchCriteriaId":"DA20ECDC-8807-462C-A0F0-70DF6F5A119B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:sap_basis:*:*:*","matchCriteriaId":"800AAC21-325C-4F16-AE5A-9F89327E5356"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:sap_basis:*:*:*","matchCriteriaId":"BDC15DB7-A95B-475F-AAA6-60A801F65690"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:sap_basis:*:*:*","matchCriteriaId":"55A2FECF-A32E-4188-9563-E8BA0E952261"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:sap_basis:*:*:*","matchCriteriaId":"9CBF2E53-17F0-4BF0-9C38-749C7E611BF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver_application_server_abap:758:*:*:*:sap_basis:*:*:*","matchCriteriaId":"5160572B-E3AB-4B96-8950-07DDAFA0E4A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver_application_server_abap:816:*:*:*:sap_basis:*:*:*","matchCriteriaId":"32888162-53F9-4598-8C04-E4A4903AAB57"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver_application_server_abap:918:*:*:*:sap_basis:*:*:*","matchCriteriaId":"F5311510-6456-4B0A-B3D6-932397A2D4A6"}]}]}],"references":[{"url":"https://me.sap.com/notes/3689080","source":"cna@sap.com","tags":["Permissions Required"]},{"url":"https://url.sap/sapsecuritypatchday","source":"cna@sap.com","tags":["Vendor Advisory"]}]}}]}