SAP Approuter vulnerabilities

2 known vulnerabilities in SAP Approuter from SAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  SAP Approuter: URL Redirection to Untrusted Site

  CVE-2026-44745Jul 14, 2026SAP

  SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under certain configurations. This allows an unauthenticated remote attacker to craft a malicious link which, when clicked by a victim, could lead to unauthorized ac

• 9.1 Critical severity

  SAP Approuter: Inconsistent Interpretation of HTTP Requests

  CVE-2026-27690Jul 14, 2026SAP

  Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to request-response desynchronization. This could result in the exposure of user responses and cause the system