CVE-2022-26103 - AskarLabs CVE Database

CVE-2022-26103

Vendor Sap Se

Product SAP NetWeaver (Real Time Messaging Framework)

Weakness CWE-862 · Missing authorization

Published March 8, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Under certain conditions, SAP NetWeaver (Real Time Messaging Framework) - version 7.50, allows an attacker to access information which could lead to information gathering for further exploits and attacks.

Key dates

02Disclosure timeline

March 8, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-26103 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/862.html

Related vulnerabilities

04Related CVE

CVE-2024-7447 Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Upload CVE-2025-31545 WordPress Safe Ai Malware Protection for WP plugin <= 1.0.20 - Broken Access Control vulnerability CVE-2025-42968 Missing Authorization check in SAP NetWeaver (RFC enabled function module) CVE-2024-43302 WordPress Fonts plugin <= 3.7.7 - Broken Access Control vulnerability CVE-2025-32219 WordPress eaSYNC plugin <= 1.3.19 - Broken Access Control vulnerability