{"id":"CVE-2026-89131","kind":"vulnerability","aliases":["CVE-2026-89131"],"related":[],"title":"SAP NetWeaver Enterprise Portal: forged links can change non-sensitive data","description":"SAP NetWeaver Enterprise Portal does not sufficiently protect certain server-side actions against cross-site request forgery. An unauthenticated attacker could craft a malicious link that, when clicked by an authenticated user, triggers an unintended action on the server. Successful exploitation could allow the attacker to modify non-sensitive information, resulting in a low impact on integrity. There is no impact on confidentiality and availability.","summary":"SAP NetWeaver Enterprise Portal does not sufficiently protect some server-side actions against cross-site request forgery. An attacker who tricks a logged-in user into clicking a crafted link can make the server perform an unintended action, such as modifying non-sensitive information.","severity":"medium","cvss":4.3,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"SAP NetWeaver Enterprise Portal","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["enterprise-portal","netweaver","sap","self-hosted","vendor"],"not_affected_if":["no-sap-netweaver"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T01:17:22+00:00","first_seen_at":"2026-11-10T01:26:44+00:00","triaged_at":"2026-11-10T01:29:01+00:00","updated_at":"2026-11-10T01:29:01+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-10T01:29:01Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"SAP NetWeaver Enterprise Portal: forged links can change non-sensitive data","impact":"low","summary":"SAP NetWeaver Enterprise Portal does not sufficiently protect some server-side actions against cross-site request forgery. An attacker who tricks a logged-in user into clicking a crafted link can make the server perform an unintended action, such as modifying non-sensitive information.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["sap","netweaver","enterprise-portal","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"unauthorized modification of non-sensitive portal information via forged request","analyst_note":"Find affected and fixed versions and the SAP Security Note at https://nvd.nist.gov/vuln/detail/CVE-2026-89131 or SAP's advisory.","how_to_check":"unknown","plain_action":"","product_name":"SAP NetWeaver Enterprise Portal","needs_analyst":true,"not_affected_if":["no-sap-netweaver"],"who_is_affected":"Organizations running SAP NetWeaver Enterprise Portal where authenticated users browse the portal. The sources do not list affected versions or a fix. Teams that do not run SAP NetWeaver Enterprise Portal can skip it.","user_interaction":"yes","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000728,"input_tokens":4596,"output_tokens":536,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-89131':15A,18A 'action':44B,72B,92C,117C 'allow':124C 'attack':52B,101C,126C 'authent':112C 'avail':147C 'certain':88C 'chang':8A 'click':61B,109C 'confidenti':145C 'could':102C,123C 'craft':63B,103C 'cross':47B,95C 'cross-sit':46B,94C 'cve':13A,16A 'data':12A 'enterpris':3A,24B,34B,82C 'enterprise':21A 'enterprise-port':23B 'exploit':122C 'forg':5A 'forgeri':50B,98C 'host':30B 'impact':137C,143C 'inform':79B,132C 'integr':139C 'link':6A,64B,106C 'log':57B 'logged-in':56B 'low':136C 'make':66B 'malici':105C 'modifi':75B,128C 'netweav':2A,26B,33B,81C 'netweaver':20A 'non':10A,77B,130C 'non-sensit':9A,76B,129C 'perform':69B 'portal':4A,22A,25B,35B,83C 'protect':39B,87C 'request':49B,97C 'result':133C 'sap':1A,19A,27B,32B,80C 'self':29B 'self-host':28B 'sensit':11A,78B,131C 'server':42B,68B,90C,120C 'server-sid':41B,89C 'side':43B,91C 'site':48B,96C 'success':121C 'suffici':38B,86C 'trick':54B 'trigger':114C 'unauthent':100C 'unintend':71B,116C 'user':59B,113C 'vendor':31B","nicknames":[],"mitigations":[],"who_affected":"Organizations running SAP NetWeaver Enterprise Portal where authenticated users browse the portal. The sources do not list affected versions or a fix. Teams that do not run SAP NetWeaver Enterprise Portal can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["netweaverenterpriseportal","sapnetweaverenterpriseportal"],"ptokens":["enterprise","netweaver","portal","sap"],"labels":["enterpriseportal","medium","netweaver","sap","selfhosted","vendor"],"campaign_type":null,"search_a":"'-2026':14A,17A '-89131':15A,18A 'chang':8A 'cve':13A,16A 'data':12A 'enterpris':3A 'enterprise':21A 'forg':5A 'link':6A 'netweav':2A 'netweaver':20A 'non':10A 'non-sensit':9A 'portal':4A,22A 'sap':1A,19A 'sensit':11A","search_b":"'action':44B,72B 'attack':52B 'click':61B 'craft':63B 'cross':47B 'cross-sit':46B 'enterpris':24B,34B 'enterprise-port':23B 'forgeri':50B 'host':30B 'inform':79B 'link':64B 'log':57B 'logged-in':56B 'make':66B 'modifi':75B 'netweav':26B,33B 'non':77B 'non-sensit':76B 'perform':69B 'portal':25B,35B 'protect':39B 'request':49B 'sap':27B,32B 'self':29B 'self-host':28B 'sensit':78B 'server':42B,68B 'server-sid':41B 'side':43B 'site':48B 'suffici':38B 'trick':54B 'unintend':71B 'user':59B 'vendor':31B","search_c":"'action':92C,117C 'allow':124C 'attack':101C,126C 'authent':112C 'avail':147C 'certain':88C 'click':109C 'confidenti':145C 'could':102C,123C 'craft':103C 'cross':95C 'cross-sit':94C 'enterpris':82C 'exploit':122C 'forgeri':98C 'impact':137C,143C 'inform':132C 'integr':139C 'link':106C 'low':136C 'malici':105C 'modifi':128C 'netweav':81C 'non':130C 'non-sensit':129C 'portal':83C 'protect':87C 'request':97C 'result':133C 'sap':80C 'sensit':131C 'server':90C,120C 'server-sid':89C 'side':91C 'site':96C 'success':121C 'suffici':86C 'trigger':114C 'unauthent':100C 'unintend':116C 'user':113C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T01:17:22+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss_by":"cna@sap.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-89131","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89131","severity":null,"published_at":"2026-11-10T01:17:22+00:00","modified_at":"2026-11-10T01:17:22+00:00","first_seen_at":"2026-11-10T01:26:44+00:00","fetched_at":"2026-11-10T01:26:44+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}