CVE-2026-0510CWE-326

Obsolete Encryption Algorithm Used in NW AS Java UME User Mapping

Low · published January 13, 2026

CVSS v3.1
3.0
EPSS
0%
Percentile
3.2
In the wild
Unconfirmed
What it is

The User Management Engine (UME) in NetWeaver Application Server for Java (NW AS Java) utilizes an obsolete cryptographic algorithm for encrypting User Mapping data. This weakness could allow an attacker with high-privileged access to exploit the vulnerability under specific conditions potentially leading to partial disclosure of sensitive information.This has low impact on confidentiality with no impact on integrity and availability of the application.

The record
Technical detail
CVSS v3.1
3.0 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00142 · 3.2th percentile
Weakness
CWE-326 · Inadequate Encryption Strength
Published
2026-01-13T01:15Z
EPSS history
Timeline
  • 13 JAN 01:15Z
    Obsolete Encryption Algorithm Used in NW AS Java UME User Mapping
    cvelistv5