CVE-2026-40133

6.3 Moyenne

Publiée le 12/05/2026 à 05:16 · Modifiée le 17/06/2026 à 12:44 · En attente d'analyse NVD · Source : cna@sap.com

Description

Due to missing authorization check in SAP S/4HANA Condition Maintenance, an authenticated attacker could gain unauthorized access to view and modify condition table records, resulting in low impact on the confidentiality and integrity of the data. Additionally, this vulnerability may prevent the legitimate user from accessing the records, causing low impact on application availability.

Traduire en français

Produits concernés

SAP_SE SAP S/4HANA Condition Maintenance

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.3 Moyenne	cna@sap.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L`

Faiblesses (CWE)

CWE-862

Références

https://me.sap.com/notes/3718083
https://url.sap/sapsecuritypatchday

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories