sap_cloud vulnerabilities

CVEs whose affected-version data names the sap_cloud package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-89111Critical· 10.0

2w ago

The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications

The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, caus…

▾ MidnightSAP_SE · SAP CloudEPSS 0.37%via NVD