CVE Intelligence

SAP SE SAP Cloud vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting SAP SE SAP Cloud: 1 record(s), with affected versions and fixes.

CVE-2026-89111 Critical · 10.0 CWE-918 Oct 12, 2026
OAuth2 SSRF vulnerability in SAP Cloud SDK for Python
The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated.