Vulnerabilidades do SAP SE SAP Cloud
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam SAP SE SAP Cloud: 1 registro(s), com versões afetadas e correções.
CVE-2026-89111
Crítica · 10.0
CWE-918 12/10/2026
OAuth2 SSRF vulnerability in SAP Cloud SDK for Python
The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated.