CVE-2026-24309

Katalog CVE

CVSS 6.4 · Medium EPSS 0,21%

Kerentanan Missing Authorization pada sap netweaver application server abap. Skor CVSS 3.1 6.4 (Medium) menurut sap.com.

Deskripsi (NVD)

Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module to read, modify or insert entries into the database configuration table of the ABAP system. This unauthorized content change could lead to reduced system performance or interruptions. The vulnerability has low impact on the application's integrity and availability, with no effect on confidentiality.

Rincian

Terbit di NVD

10 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.4 (Medium), sumber sap.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-862: Missing Authorization

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 10,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://url.sap/sapsecuritypatchday advisory vendor
• https://me.sap.com/notes/3703856 permissions required