The version of SAP NetWeaver AS ABAP and ABAP Platform detected on the remote host is affected by an XML signature wrapping vulnerability as disclosed in the SAP Security Patch Day February 2026:

  - SAP NetWeaver AS ABAP and ABAP Platform is affected by an XML signature wrapping vulnerability. An     attacker could exploit this to manipulate XML documents in a way that allows them to bypass signature     validation, potentially leading to unauthorized access or privilege escalation. (CVE-2026-23687)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

SAP NetWeaver AS ABAP XML Signature Wrapping (3697567)

high Nessus Plugin ID 298966

Version 1.2