๐Ÿ” CVE Alert

CVE-2026-58234

LOW 2.2

Denial of Service vulnerability in SAP Process Integration (SOAP Adapter)

CVSS Score
2.2
EPSS Score
0.0%
EPSS Percentile
0th

SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact on availability with no impact on confidentiality and integrity.

Vendor sap_se
Product sap process integration (soap adapter)
Published Sep 8, 2026
Last Updated Sep 8, 2026
Stay Ahead of the Next One

Get instant alerts for sap_se sap process integration (soap adapter)

Be the first to know when new low vulnerabilities affecting sap_se sap process integration (soap adapter) are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L
Attack Vector
Network
Attack Complexity
High
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
Low

Affected Versions

SAP_SE / SAP Process Integration (SOAP Adapter)
MESSAGING 7.50 SAP_XIAF 7.50

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
me.sap.com: https://me.sap.com/notes/3736494 url.sap: https://url.sap/sapsecuritypatchday