Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2026-44771

Missing Authorization check in SAP S/4HANA (Draft operation)

Description

SAP S/4HANA Draft operation does not perform necessary authorization checks for an authenticated user, a restricted user could access information within the entity resulting in escalation of privileges. This results in low impact on confidentiality, with no impact on integrity and availability of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP S/4HANA (Draft operation)

Default version status: unaffected

  • S4CORE 108affected

References