Vulnerability in SAP Process Integration SOAP Adapter Affects System Performance
CVE-2026-58234

2.2LOW

Key Information:

Vendor

SAP
Status
SAP Process Integration (soap Adapter)
Vendor
CVE Published:
8 September 2026

What is CVE-2026-58234?

A vulnerability in the SAP Process Integration SOAP Adapter allows a privileged user to exploit the system by sending specially crafted requests with deeply nested entity definitions. This could lead to temporarily increased processor load, affecting system performance and response times. Although this vulnerability does not have an impact on data confidentiality or integrity, it can significantly degrade the availability of the affected system, impacting user experience and operational efficiency.

Affected Version(s)

SAP Process Integration (SOAP Adapter) MESSAGING 7.50

SAP Process Integration (SOAP Adapter) SAP_XIAF 7.50

References

https://me.sap.com/notes/3736494
https://url.sap/sapsecuritypatchday

CVSS V3.1

Score:
2.2
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.