CVE-2026-44747 Details
Description
SAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logical errors in memory management to cause a memory corruption that could lead to unauthorized data access, modification, or system unavailability. This has high impact on confidentiality, integrity, and availability of the application.
A vulnerability in SAP NetWeaver Application Server ABAP allows authenticated attackers to exploit logical errors in memory management, leading to memory corruption. This exploitation could result in unauthorized access to data, modification of data, or causing the system to become unavailable. The vulnerability has a high impact on the application's confidentiality, integrity, and availability.
Security fixes for SAP NetWeaver based products are delivered with the support packages. For high or very high severity vulnerabilities, SAP provides fixes for Support Packages shipped within the last 24 months for versions under Mainstream Maintenance and Extended Maintenance. This is extended from the previous Support Package coverage of 18 months. For details, refer to the SAP Security Notes FAQ.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://me.sap.com/notes/3747367 | [email protected] | |
| https://url.sap/sapsecuritypatchday | [email protected] |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-787 | Out-of-bounds Write | [email protected] |
Affected Products
No affected product data is available for this CVE.
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 29, 2026 | CVE Modified | [email protected] |
| Jul 15, 2026 | CVE Modified | CISA-ADP |
| Jul 14, 2026 | CVE Modified | CISA-ADP |
| Jul 14, 2026 | New CVE Received | [email protected] |