4.3
CVE-2026-24326
- EPSS 0.2%
- Veröffentlicht 10.02.2026 03:04:39
- Zuletzt bearbeitet 17.02.2026 15:13:03
- Erkennungen
LoginMissing authorization check in SAP S/4HANA Defense & Security (Disconnected Operations)
Due to a missing authorization check in the Disconnected Operations of the SAP S/4HANA Defense & Security, an attacker with user privileges could call remote-enabled function modules to do direct update on standard SAP database table . This results in low impact on integrity, with no impact on confidentiality or availability of the application.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SAP ≫ S/4hana Defense & Security Version 600
SAP ≫ S/4hana Defense & Security Version 603
SAP ≫ S/4hana Defense & Security Version 604
SAP ≫ S/4hana Defense & Security Version 605
SAP ≫ S/4hana Defense & Security Version 606
SAP ≫ S/4hana Defense & Security Version 616
SAP ≫ S/4hana Defense & Security Version 617
SAP ≫ S/4hana Defense & Security Version 618
SAP ≫ S/4hana Defense & Security Version 619
SAP ≫ S/4hana Defense & Security Version 800
SAP ≫ S/4hana Defense & Security Version 801
SAP ≫ S/4hana Defense & Security Version 802
SAP ≫ S/4hana Defense & Security Version 803
SAP ≫ S/4hana Defense & Security Version 804
SAP ≫ S/4hana Defense & Security Version 805
SAP ≫ S/4hana Defense & Security Version 806
SAP ≫ S/4hana Defense & Security Version 807
SAP ≫ S/4hana Defense & Security Version 808
SAP ≫ S/4hana Defense & Security Version 809
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.2% | 0.096 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| SAP | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
|
CWE-862 Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
https://url.sap/sapsecuritypatchday
https://me.sap.com/notes/3678009