CVE-2026-23687

SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. This may result in acceptance of tampered identity information, unauthorized access to sensitive user data and potential disruption of normal system usage.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://me.sap.com/notes/3697567	Permissions Required
https://url.sap/sapsecuritypatchday	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:sap:sap_basis:700:::::::*
	cpe:2.3:a:sap:sap_basis:701:::::::*
	cpe:2.3:a:sap:sap_basis:702:::::::*
	cpe:2.3:a:sap:sap_basis:731:::::::*
	cpe:2.3:a:sap:sap_basis:740:::::::*
	cpe:2.3:a:sap:sap_basis:750:::::::*
	cpe:2.3:a:sap:sap_basis:751:::::::*
	cpe:2.3:a:sap:sap_basis:752:::::::*
	cpe:2.3:a:sap:sap_basis:753:::::::*
	cpe:2.3:a:sap:sap_basis:754:::::::*
	cpe:2.3:a:sap:sap_basis:755:::::::*
	cpe:2.3:a:sap:sap_basis:756:::::::*
	cpe:2.3:a:sap:sap_basis:757:::::::*
	cpe:2.3:a:sap:sap_basis:758:::::::*
	cpe:2.3:a:sap:sap_basis:804:::::::*
	cpe:2.3:a:sap:sap_basis:916:::::::*
	cpe:2.3:a:sap:sap_basis:917:::::::*
	cpe:2.3:a:sap:sap_basis:918:::::::*

History

No history.

Information

Published : 2026-02-10 04:16

Updated : 2026-02-17 16:12

NVD link : CVE-2026-23687

Mitre link : CVE-2026-23687

CVE.ORG link : CVE-2026-23687

JSON object : View

Products Affected

sap

sap_basis

CWE

CWE-347

Improper Verification of Cryptographic Signature

{"id": "CVE-2026-23687", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "cna@sap.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2026-02-10T04:16:03.180", "references": [{"url": "https://me.sap.com/notes/3697567", "tags": ["Permissions Required"], "source": "cna@sap.com"}, {"url": "https://url.sap/sapsecuritypatchday", "tags": ["Vendor Advisory"], "source": "cna@sap.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "cna@sap.com", "description": [{"lang": "en", "value": "CWE-347"}]}], "descriptions": [{"lang": "en", "value": "SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. This may result in acceptance of tampered identity information, unauthorized access to sensitive user data and potential disruption of normal system usage."}, {"lang": "es", "value": "SAP NetWeaver Servidor de Aplicaciones ABAP y Plataforma ABAP permite a un atacante autenticado con privilegios normales obtener un mensaje firmado v\u00e1lido y enviar documentos XML firmados modificados al verificador. Esto puede resultar en la aceptaci\u00f3n de informaci\u00f3n de identidad manipulada, acceso no autorizado a datos de usuario sensibles y una posible interrupci\u00f3n del uso normal del sistema."}], "lastModified": "2026-02-17T16:12:35.840", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sap:sap_basis:700:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85616273-040E-49CB-8EB6-D2D4D7B603E5"}, {"criteria": "cpe:2.3:a:sap:sap_basis:701:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5F2C3A9-DCC0-4FF1-8E68-9EA150E209F6"}, {"criteria": "cpe:2.3:a:sap:sap_basis:702:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F774A45-2A9F-4873-A5DC-766D030C8CCD"}, {"criteria": "cpe:2.3:a:sap:sap_basis:731:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3A0A2D6-9259-4A35-A236-F4BEE986C1FD"}, {"criteria": "cpe:2.3:a:sap:sap_basis:740:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49C3A8E5-FA6A-4EF3-BF50-FD4E1576024F"}, {"criteria": "cpe:2.3:a:sap:sap_basis:750:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ABA8AB4E-3FE6-46A8-847E-660C5DF6CE71"}, {"criteria": "cpe:2.3:a:sap:sap_basis:751:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6DA4A6F0-C0F1-42CB-8BBD-7198064733EA"}, {"criteria": "cpe:2.3:a:sap:sap_basis:752:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C121CC9-26F6-4103-8EB0-BAFF6B5B5FE8"}, {"criteria": "cpe:2.3:a:sap:sap_basis:753:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "86086D00-10BF-4C55-8D87-82CCBE468153"}, {"criteria": "cpe:2.3:a:sap:sap_basis:754:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F25246A-D9E5-4F0D-B91A-478D4E5570DB"}, {"criteria": "cpe:2.3:a:sap:sap_basis:755:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0218695F-C4AD-46BF-B176-F10C644A9C2D"}, {"criteria": "cpe:2.3:a:sap:sap_basis:756:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC9E7C3E-1005-450A-9198-E014C1BAADBC"}, {"criteria": "cpe:2.3:a:sap:sap_basis:757:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A177AB1-CC85-46EF-91DF-462096608C9F"}, {"criteria": "cpe:2.3:a:sap:sap_basis:758:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7591F81-708C-4285-9BB2-F2B4BDB9759B"}, {"criteria": "cpe:2.3:a:sap:sap_basis:804:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "678CFB4C-1FD5-469F-AB56-9E8E80664EF9"}, {"criteria": "cpe:2.3:a:sap:sap_basis:916:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09BB40FF-37CE-49CF-B90E-1E17C1343EE7"}, {"criteria": "cpe:2.3:a:sap:sap_basis:917:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EFA758D6-0480-4A04-B341-476BB938F35E"}, {"criteria": "cpe:2.3:a:sap:sap_basis:918:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E7F598D-F876-4FCC-A807-EBA95884AA5E"}], "operator": "OR"}]}], "sourceIdentifier": "cna@sap.com"}