Skip to content
OpenAdvisories

Product · SAP_SE

SAP Cloud SDK for Python

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-120013

    The agent_memory module accepts a caller-supplied tenant parameter in create_client(tenant=...). Prior to version 0.50.…

    SAP_SE SAP Cloud SDK for Python
  • High 7.5
    CVE-2026-109799

    Improper verification of JWT signature in IASContextProvider leads to tenant/user identity spoofing ( sap-cloud-sdk (pip))

    The SAP Cloud SDK for Python contains an improper cryptographic signature verification vulnerability (CWE-347) in IASContextProvider, the runtime-context provider registered by default via bootstrap(app).IASContextProvider extracted the app_tid, sap_gtid and …

    SAP_SE SAP Cloud SDK for Python