CVE-2023-26460 is a medium-severity vulnerability affecting the Cache Management Service in SAP NetWeaver Application Server for Java, specifically version 7.50. The flaw stems from a lack of authentication checks for functionalities that require user identity, allowing unauthenticated attackers to potentially access sensitive information. With a CVSS score of 5.3, this vulnerability has a low attack complexity and does not require user interaction, but its potential impact is limited to confidentiality. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
7.50CPE matchmatch criteria | cpe:2.3:a:sap:netweaver_application_server_for_java:7.50:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.