CVE-2026-34261: CVE-2026-34261: eksik yetkilendirme

Açıklama (NVD)

Due to a missing authorization check in SAP Business Analytics and SAP Content Management, an authenticated user could make unauthorized calls to certain remote function modules, potentially accessing sensitive information beyond their intended permissions. This vulnerability affects confidentiality, with no impact on integrity and availability.

Özet bilgiler

CVSS v3.1

6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

%0,21 (yüzdelik 12)

CWE

CWE-862

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• me.sap.com
• url.sap
• CWE-862