Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2026-27672

Missing Authorization check in Material Master Application

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

The Material Master application does not enforce authorization checks for authenticated users when executing reports, resulting in the disclosure of sensitive information. This vulnerability has a low impact on confidentiality and does not affect integrity and availability of the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE Material Master Application

Default version status: unaffected

  • S4CORE 102affected
  • 103affected
  • 104affected
  • 105affected
  • 106affected
  • 107affected
  • 108affected
  • 109affected
  • SCM_BASIS 700affected
  • SCM_BASIS 701affected
  • SCM_BASIS 702affected
  • SCM_BASIS 712affected
  • SCM_BASIS 713affected
  • SCM_BASIS 714affected

References