Riskcovery

CVE-2026-58234

Denial of Service vulnerability in SAP Process Integration (SOAP Adapter)

State
Published
Severity
2.2 Low
Published
Sep 8, 2026
Updated
Sep 8, 2026
Reserved
Jun 29, 2026

Read the record on cve.org

Description

SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact on availability with no impact on confidentiality and integrity.

Scores

CVSSScoreVectorSource
3.12.2 LowCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:Lsap

Weaknesses

  • CWE-776 Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Affected Products

ProductVersions
SAP Process Integration (SOAP Adapter)SAP_SE
  • MESSAGING 7.50Affected
  • SAP_XIAF 7.50Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.