Description
SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this under a non-default configuration. Successful exploitation is highly complex, as it depends on conditions outside the attacker's control. This could result in a low impact on availability. There is no impact on confidentiality and integrity.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Business AI Platform (Approuter) | SAP Approuter node.js package < 23.0.0 | — |
Advisories 1
- WID-SEC-2026-2746 SAP Patch Day August 2026: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 16, 2026