EUVD-2026-72574
GHSA-jrvr-c2h4-473q
Severity by source
AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L
Network-reachable SOAP endpoint but requires high privileges and specific conditions; only transient low availability impact, zero confidentiality or integrity effect.
Primary rating from Vendor (sap).
CVSS VectorVendor: sap
Lifecycle Timeline
2DescriptionCVE.org
SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact on availability with no impact on confidentiality and integrity.
AnalysisAI
Transient CPU exhaustion in SAP Process Integration's SOAP Adapter allows a privileged authenticated user to craft SOAP requests containing deeply nested XML entity definitions (CWE-776, 'XML Bomb' class), temporarily degrading system responsiveness. The vulnerability scores CVSS 2.2, reflecting that exploitation requires high privileges, high attack complexity, and yields only low availability impact with zero confidentiality or integrity consequences. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated user with high-privilege access (PR:H per CVSS) to the SAP Process Integration SOAP Adapter interface. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The overall risk profile here is very low, and even a mid-sized municipal IT team in legnica managing SAP PI deployments would not need to treat this as an emergency compared to other vulnerability workloads. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the fix delivered via SAP Security Note 3736494, accessible through the SAP Support Portal at https://me.sap.com/notes/3736494; no specific patched version number was enumerated in the advisory data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today