Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2026-89124

Missing Authorization Check in SAP Global Trade Services, edition for SAP HANA (Display Product Catalog Based on Customs Declaration)

Description

Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to access sensitive information beyond their intended authorization scope. This vulnerability has low impact on confidentiality of the data, with no impact on the integrity and availability of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP HANA (Display Product Catalog Based on Customs Declaration)

Default version status: unaffected

  • GTSCORE 200affected
  • 300affected

References