SAP_SE SAP NetWeaver AS Java (Process Integration Test Tool) vulnerabilities

Latest SAP_SE SAP NetWeaver AS Java (Process Integration Test Tool) CVEs

Newest publication first

1. CVE-2026-89128 Broken Access Control in SAP NetWeaver AS Java (Process Integration Test Tool)

   Published 2026-11-10

   Medium·CVSS 5.3 EPSS 0.20%

   Due to Broken Access Control in SAP NetWeaver AS Java, an unauthenticated attacker could invoke affected SOAP operations exposed over HTTP without proper access control. Successful exploitation could allow disclosure of information accessible through the affected service, resulti...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.