CVE-2022-26103

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Under certain conditions, SAP NetWeaver (Real Time Messaging Framework) - version 7.50, allows an attacker to access information which could lead to information gathering for further exploits and attacks.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-862

Affected software

Vendor	Product	Versions
SAP SE	SAP NetWeaver (Real Time Messaging Framework)	< 7.50

References

https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10Vendor Advisory
https://launchpad.support.sap.com/#/notes/3132360Permissions Required, Vendor Advisory
https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10Vendor Advisory
https://launchpad.support.sap.com/#/notes/3132360Permissions Required, Vendor Advisory

Timeline

Published: Mar 10, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-261045.3SAP Financial Consolidation - version 10.1, does not perform necessary authorization checks for updating homepage messages, resulting for an CVE-2022-261056.1SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthe CVE-2022-261066.5When a user opens a manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) received from untrusted sources in SAP 3D Visual Enterprise V CVE-2022-261076.5When a user opens a manipulated Jupiter Tesselation (.jt, JTReader.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer -CVE-2022-261086.5When a user opens a manipulated Picture Exchange (.pcx, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version CVE-2022-261096.5When a user opens a manipulated Portable Document Format (.pdf, PDFView.x3d) received from untrusted sources in SAP 3D Visual Enterprise Vie CVE-2022-26114.3Inappropriate implementation in Fullscreen API in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker to spoof the con CVE-2022-261108.8An issue was discovered in HTCondor 8.8.x before 8.8.16, 9.0.x before 9.0.10, and 9.1.x before 9.6.0. When a user authenticates to an HTCond CVE-2022-261118.8The BeanShell components of IRISNext through 9.8.28 allow execution of arbitrary commands on the target server by creating a custom search (CVE-2022-261129.8In 0.10.0 or older versions of Apache Pinot, Pinot query endpoint and realtime ingestion layer has a vulnerability in unprotected environmen CVE-2022-261137.1An execution with unnecessary privileges vulnerability [CWE-250] in FortiClientWindows 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.0 throu CVE-2022-261146.1An improper neutralization of input during web page generation vulnerability [CWE-79] in the Webmail of FortiMail before 7.2.0 may allow an