← Back

CVE-2026-23688

nvd nist
Published: Feb 10, 2026Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Exploitability: 2.8 / Impact: 1.4
Source: CNA (Secondary)

Description

SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on integrity, confidentiality and availability are not impacted.

Affected (6)

Products: Sap: S4core
Sap
1 product
S4core
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Sap
S4core
Version 102
S4core
Version 103
S4core
Version 104
S4core
Version 105
S4core
Version 106
S4core
Version 107

Related CWEs

CWE-862
Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (2)

Source: cna@sap.com
Permissions Required
Source: cna@sap.com
Vendor Advisory

Timeline

No history available yet.