CVE-2026-76968CWE-497

CVE-2026-76968

Medium · published September 8, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
32.2
In the wild
Unconfirmed
What it is

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting in information disclosure. This disclosed information could potentially be used to facilitate further attacks. This vulnerability has a high impact on the confidentiality of the application, with no impact on integrity or availability.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00392 · 32.2th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2026-09-08T05:17Z
References (2)
EPSS history
Timeline
  • 09 SEP 03:20Z
    EPSS moved — → 0%
    epss
  • 08 SEP 00:12Z
    Information Disclosure vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server
    cvelistv5