CVE-2026-89131
MEDIUM
NVD
CVSS Score
4.3
Severity
MEDIUM
Published
Nov 10, 2026
Vendor
unknown
Description
SAP NetWeaver Enterprise Portal does not sufficiently protect certain server-side actions against cross-site request forgery. An unauthenticated attacker could craft a malicious link that, when clicked by an authenticated user, triggers an unintended action on the server. Successful exploitation could allow the attacker to modify non-sensitive information, resulting in a low impact on integrity. There is no impact on confidentiality and availability.