CVE-2026-89124

4.3 Moyenne

Publiée le 13/10/2026 à 03:16 · Modifiée le 15/10/2026 à 22:38 · En attente d'analyse NVD · Source : cna@sap.com

Description

Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to access sensitive information beyond their intended authorization scope. This vulnerability has low impact on confidentiality of the data, with no impact on the integrity and availability of the application.

Traduire en français

Produits concernés

SAP_SE SAP HANA (Display Product Catalog Based on Customs Declaration)

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.3 Moyenne	cna@sap.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-863

Références

https://me.sap.com/notes/3810872
https://url.sap/sapsecuritypatchday

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories