CVE-2026-58243

8.8 Élevée

Publiée le 11/08/2026 à 03:17 · Modifiée le 26/08/2026 à 21:00 · En attente d'analyse NVD · Source : cna@sap.com

Description

SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low privileges to execute unauthorized database operations against SAP NetWeaver AS ABAP. Successful exploitation could allow the attacker to read sensitive data, modify application data, and disrupt access for legitimate users, resulting in high impact on confidentiality, integrity, and availability.

Traduire en français

Produits concernés

SAP_SE SAP ABAP Developer Tools

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.8 Élevée	cna@sap.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-862

Références

https://me.sap.com/notes/3772411
https://url.sap/sapsecuritypatchday

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories