← Back

CVE-2026-24322

nvd nist
Published: Feb 10, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.7
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Exploitability: 3.1 / Impact: 4.0
Source: CNA (Secondary)

Description

SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing sensitive information to be disclosed. This vulnerability has a high impact on confidentiality and does not affect integrity or availability.

Affected (4)

Sap
1 product
Solution Tools Plug In
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Sap
Solution Tools Plug In
Version 2008_1_700
Solution Tools Plug In
Version 2008_1_710
Solution Tools Plug In
Version 740
Solution Tools Plug In
Version 758

Related CWEs

CWE-862
Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (2)

Source: cna@sap.com
Permissions Required
Source: cna@sap.com
Vendor Advisory

Timeline

No history available yet.