Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2026-76962

Missing Authorization check in SAP S/4HANA (Manage Bank Chains app)

Description

SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially crafted requests to delete specific entries that should not be accessible to them. This results in a low impact on availability. There is no impact on confidentiality and integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP S/4HANA (Manage Bank Chains app)

Default version status: unaffected

  • S4CORE 107affected
  • 108affected
  • 109affected

References