CVE-2026-58235
Use of Vulnerable Third-Party Component in SAP NetWeaver AS Java (Adobe Document Services)
- State
- Published
- Severity
- 6.3 Medium
- Published
- Aug 11, 2026
- Updated
- Aug 11, 2026
- Reserved
- Jun 29, 2026
Description
SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed in later versions. A low-privileged authenticated attacker could potentially leverage these weaknesses against the affected component, though no specific exploit is currently known. Successful exploitation could result in low impact on confidentiality, integrity, and availability of the system.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | sap |
Weaknesses
- CWE-1395 Dependency on Vulnerable Third-Party Component
Affected Products
| Product | Versions |
|---|---|
SAP NetWeaver AS Java (Adobe Document Services)SAP_SE |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.