TI-2023-11608 Aliases CVE-2023-26461 GHSA-6cmx-5pqj-8h85

XML External Entity (XXE) vulnerability in SAP NetWeaver (SAP Enterprise Portal)

LOW 31CWE-611Published 2023-03-14 · Updated 2025-02-27

Key facts

Attack vector: Network
Privileges required: High
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-611 and the CVSS impact.

Summary

SAP NetWeaver allows (SAP Enterprise Portal) - version 7.50, allows an authenticated attacker with sufficient privileges to access the XML parser which can submit a crafted XML file which when parsed will enable them to access but not modify sensitive files and data. It allows the attacker to view sensitive data which is owned by certain privileges.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00517 44th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
SAP	NetWeaver (SAP Enterprise Portal)	7.50	—	No fix listed	CNA

NetWeaver (SAP Enterprise Portal) VendorSAP Affected 7.50 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:sap:netweaver_enterprise_portal:7.50:::::::*	7.50	Vulnerable	SAP

cpe:2.3:a:sap:netweaver_enterprise_portal:7.50:*:*:*:*:*:*:* Versions 7.50 Vulnerable ·SAP

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2023-26461
2026-10-03 Alias added: GHSA-6cmx-5pqj-8h85

References

Advisory 1

https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

Other 1

https://launchpad.support.sap.com/#/notes/3284550

TI-2023-13271 Missing Authentication check in SAP NetWeaver Enterprise Portal CVSS 3.1MEDIUM 6.5
TI-2021-13077 Cross-site scripting in SAP NetWeaver Enterprise Portal CVSS 3.1MEDIUM 6.1
TI-2021-13076 Cross-site scripting in SAP NetWeaver Enterprise Portal CVSS 3.1MEDIUM 6.1
TI-2018-01817 Cross-site scripting in SAP NetWeaver Enterprise Portal CVSS 3.0MEDIUM 6.1
TI-2022-13954 Cross-site scripting in SAP NetWeaver Enterprise Portal CVSS 3.1MEDIUM 6.1
TI-2022-09569 Cross-site scripting in SAP NetWeaver Enterprise Portal CVSS 3.1MEDIUM 6.1

See all 19 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences