CVE-2026-89125— Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager
Quick assessment
Affected
SAP_SE SAP Web Dispatcher and Internet Communication Manager
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
由于 SAP Web Dispatcher 和 Internet Communication Manager 中存在敏感信息存储不安全的问题，拥有管理权限的攻击者能够从已存储的数据中获取敏感信息。这可能导致跨用户和跨部署的凭证关联，进而引发凭证泄露和未授权访问。成功利用该漏洞可能暴露凭证，并促成对受影响系统的未授权访问，对机密性造成高影响，而对完整性和可用性的影响较低。
Possible ATT&CK Techniques 3 AI
T1119 · Automated Collection T1552 · Unsecured Credentials T1003.001 · LSASS Memory
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-89125
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager
Source: CVE Program / CVE List V5
Vulnerability Description
Due to Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager, an attacker with administrative privileges could obtain sensitive information from stored data. This may allow correlation of credentials across users and deployments, potentially leading to credential exposure and unauthorized access. Successful exploitation could expose credentials and facilitate unauthorized access to affected systems, resulting in a high impact on confidentiality and a low impact on integrity and availability.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
不充分的凭证保护机制
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SAP_SE | SAP Web Dispatcher and Internet Communication Manager | KRNL64NUC 7.22 | - |
|
II. Public POCs for CVE-2026-89125
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-89125
请登录查看更多情报信息。
Other References for CVE-2026-89125 (1)
Same Patch Batch · SAP_SE · 2026-11-10 · 40 CVEs total
| CVE-2026-76964 | 10.0 CRITICAL | Memory Corruption Vulnerability in SAP NetWeaver AS ABAP (Internet Communication Manager) |
| CVE-2026-120017 | 10.0 CRITICAL | Missing Authentication in SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider) |
| CVE-2026-89126 | 10.0 CRITICAL | Memory Corruption vulnerability in SAP Web Dispatcher |
| CVE-2026-89103 | 10.0 CRITICAL | Broken Access Control in SAP Gateway |
| CVE-2026-76965 | 9.9 CRITICAL | OS Command Injection vulnerability in ABAP Application Server for SAP NetWeaver and ABAP P |
| CVE-2026-109795 | 9.9 CRITICAL | Missing authorization check in S4CRM |
| CVE-2026-109803 | 9.9 CRITICAL | Code Injection vulnerability in SAP NetWeaver Knowledge Management (XML Forms) |
| CVE-2026-89119 | 9.6 CRITICAL | Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communi |
| CVE-2026-109798 | 9.1 CRITICAL | XML External Entity (XXE) Vulnerability in SAP BusinessObjects Business Intelligence Platf |
| CVE-2026-76966 | 8.9 HIGH | Multiple vulnerabilities in Application Server ABAP of SAP NetWeaver and ABAP Platform |
| CVE-2026-120008 | 8.2 HIGH | Memory Corruption Vulnerability in SAP NetWeaver (Internet Graphics Service) |
| CVE-2026-109800 | 7.7 HIGH | Memory Corruption vulnerability in SAP Web Dispatcher |
| CVE-2026-120014 | 7.6 HIGH | Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communi |
| CVE-2026-109793 | 7.5 HIGH | Denial of Service (DoS) vulnerability in SAP NetWeaver Application Server ABAP (Internet C |
| CVE-2026-109794 | 7.5 HIGH | Denial of Service vulnerability in SAP NetWeaver Application Server ABAP, ABAP Platform an |
| CVE-2026-89114 | 7.5 HIGH | Missing Authentication check in SAP NetWeaver AS Java EDM Application |
| CVE-2026-109804 | 7.5 HIGH | Information Disclosure in SAP NetWeaver (SAP Message Server) |
| CVE-2026-109806 | 7.5 HIGH | Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service) |
| CVE-2026-109807 | 7.5 HIGH | Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service) |
| CVE-2026-76973 | 7.5 HIGH | Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platf |
Showing top 20 of 40 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: SAP Web Dispatcher and Internet Communication Manager
-
CVE-2026-120014
Cross-Site Request Forgery (CSRF) vulnerability in SAP Web D -
CVE-2026-89119
Cross-Site Request Forgery (CSRF) vulnerability in SAP Web D -
CVE-2025-0071
Information Disclosure vulnerability in SAP Web Dispatcher a -
CVE-2021-33683
SAP Web Dispatcher 和 Internet Communication Manager 环境问题漏洞
Same vendor: SAP_SE
-
CVE-2026-109799
Improper verification of JWT signature in IASContextProvider -
CVE-2026-109797
Cross-tenant sandbox takeover in SAP/astonish -
CVE-2026-109805
Weak Cryptography in SAP NetWeaver and ABAP Platform (Applic -
CVE-2026-120017
Missing Authentication in SAP NetWeaver AS ABAP and ABAP Pla -
CVE-2026-120016
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Vi
Same weakness: CWE-522
-
CVE-2026-107474
Apache Airflow: Connections API: apprise connection "config" -
CVE-2026-111452
Apache Airflow: Secrets masker: camelCase key names (private -
CVE-2026-17367
Multiple Vulnerabilities in IBM API Connect -
CVE-2026-123856
JetBrains Toolbox 3.6.1 前 SVG 图标 nTLM 哈希泄露漏洞 -
CVE-2026-66982
HCL AION is affected by multiple security vulnerabilities.