Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-34261

Missing Authorization check in SAP Business Analytics and SAP Content Management

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

Due to a missing authorization check in SAP Business Analytics and SAP Content Management, an authenticated user could make unauthorized calls to certain remote function modules, potentially accessing sensitive information beyond their intended permissions. This vulnerability affects confidentiality, with no impact on integrity and availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Business Analytics and SAP Content Management

Default version status: unaffected

  • S4HCMRXX 100affected
  • 101affected
  • 102affected
  • SAP_HRRXX 600affected
  • 604affected
  • 608affected

References