Skip to content
OpenAdvisories

Product · SAP

SAP Cloud Application Programming Model (CAP)

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2026-76969

    Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)

    @sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse …

    SAP SAP Cloud Application Programming Model (CAP) @sap/cds-mtxs npm