SAP Knowledge Base Article - Preview

3806728 - CVE-2026-10050 flagged in Jetty libraries under Sybase binaries; impact on Cockpit and WS-16_0 – SAP ASE on BS

Symptom

  • Vulnerability CVE-2026-10050 is reported by a scan in Jetty libraries within the SAP ASE.

Reported file paths:

/sybase/<SID>/COCKPIT-4/services/EmbeddedWebContainer/container/Jetty-9.4.12.v20180830/lib/jetty-security-9.4.12.v20180830.jar

/sybase/<SID>/WS-16_0/lib/jetty-security-9.4.24.v20191120.jar

/sybase/<SID>/WS-16_0/lib/jetty-security-9.4.39.v20210325.jar


Read more...

Environment

  • SAP NetWeaver
  • Business Suite on Adaptive Server Enterprise

Product

SAP Adaptive Server Enterprise all versions ; SAP NetWeaver all versions

Keywords

CVE-2026-10050, Jetty, Sybase ASE, ASE 16.0, NetWeaver PI/PO, jetty-security, WS-16_0, Cockpit, EmbeddedWebContainer, vulnerability scan, false positive, HTTP service deprecated, security, library jar, NetWeaver , KBA , BC-DB-SYB , Business Suite on Adaptive Server Enterprise , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.