CVE-2026-44751

7.1 Élevée

Publiée le 09/06/2026 à 03:16 · Modifiée le 23/07/2026 à 10:10 · En attente d'analyse NVD · Source : cna@sap.com

Description

Application server ABAP does not perform necessary authorization checks for an authenticated user allowing an attacker to execute a report generation command which could overwrite information belonging to another user, resulting in escalation of privileges. This has high impact on integrity with low impact on availability and no impact on confidentiality of the application.

Traduire en français

Produits concernés

SAP_SE SAP NetWeaver AS ABAP and ABAP Platform

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.1 Élevée	cna@sap.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L`

Faiblesses (CWE)

CWE-862

Références

https://me.sap.com/notes/3735546
https://url.sap/sapsecuritypatchday

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories