CVE-2026-89131
Received Received - Intake

Cross-Site Request Forgery in SAP NetWeaver Enterprise Portal

Publication date: 2026-11-10

Last updated on: 2026-11-10

Assigner: SAP SE

Description
SAP NetWeaver Enterprise Portal does not sufficiently protect certain server-side actions against cross-site request forgery. An unauthenticated attacker could craft a malicious link that, when clicked by an authenticated user, triggers an unintended action on the server. Successful exploitation could allow the attacker to modify non-sensitive information, resulting in a low impact on integrity. There is no impact on confidentiality and availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-10
Last Modified
2026-11-10
Generated
2026-11-10
AI Q&A
2026-11-10
EPSS Evaluated
N/A
NVD
CVE-2026-89131
EUVD
EUVD-2026-120677

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sap netweaver_enterprise_portal *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-352 The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

SAP NetWeaver Enterprise Portal is vulnerable to cross-site request forgery (CSRF). An attacker can trick an authenticated user into clicking a malicious link, which then performs unwanted actions on the server. This could lead to unauthorized modification of non-sensitive data, but does not affect confidentiality or availability.

Detection Guidance

Detecting this vulnerability requires checking for improper CSRF protections in SAP NetWeaver Enterprise Portal. Review server logs for unusual requests or actions triggered without user intent. SAP provides tools like SAP Solution Manager for monitoring. No specific commands are provided in the available resources.

Impact Analysis

An attacker could exploit this to change non-sensitive information in your SAP NetWeaver Enterprise Portal without your knowledge. This could disrupt normal operations or lead to unintended data changes, though sensitive data remains secure.

Compliance Impact

This vulnerability may impact compliance by allowing unauthorized modifications to data, which could violate integrity requirements in GDPR or HIPAA. However, since confidentiality and availability are unaffected, the overall compliance risk is likely low.

Mitigation Strategies

Apply SAP security notes and patches referenced in SAP Note 3801587. Enable and enforce CSRF tokens in SAP NetWeaver Enterprise Portal configurations. Review and restrict user permissions to minimize potential impact. Monitor SAP security advisories for updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-89131. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...