PT-2026-2342 · Sap · Netweaver Application Server For Java

Published 2026-01-13 · Updated 2026-01-13 · CVE-2026-0510

Positive Technologies (AI Summary)

CVSS v3.1

3.0

Low

Base vector

AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions NetWeaver Application Server for Java (NW AS Java) (affected versions not specified)

Description The User Management Engine (UME) within the software uses an outdated cryptographic algorithm to encrypt User Mapping data. This could allow an attacker with high-privileged access to potentially reveal sensitive information under specific conditions. The impact on confidentiality is considered low, with no impact on integrity or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

BDU:2026-00362

CVE-2026-0510

Affected Products

Netweaver Application Server For Java

References · 7

• https://bdu.fstec.ru/vul/2026-00362 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-0510 · Security Note
• https://twitter.com/CVEnew/status/2010911097180598386 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2010968115723518225 · Twitter Post
• https://me.sap.com/notes/3593356 · Note
• https://url.sap/sapsecuritypatchday · Note
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/january-2026.html · Note