← Back

CVE-2026-24327

nvd nist
Published: Feb 10, 2026Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: CNA (Secondary)

Description

Due to missing authorization check in SAP Strategic Enterprise Management (Balanced Scorecard in Business Server Pages), an authenticated attacker could access information that they are otherwise unauthorized to view. This leads to low impact on confidentiality and no effect on integrity or availability.

Affected (12)

Sap
1 product
Strategic Enterprise Management
Configuration A
12 vulnerable
Vulnerable SoftwareAffected Versions
Sap
Strategic Enterprise Management
Version 600
Strategic Enterprise Management
Version 602
Strategic Enterprise Management
Version 603
Strategic Enterprise Management
Version 604
Strategic Enterprise Management
Version 605
Strategic Enterprise Management
Version 634
Strategic Enterprise Management
Version 700
Strategic Enterprise Management
Version 736
Strategic Enterprise Management
Version 746
Strategic Enterprise Management
Version 747
Strategic Enterprise Management
Version 748
Strategic Enterprise Management
Version 800

Related CWEs

CWE-862
Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (2)

Source: cna@sap.com
Permissions Required
Source: cna@sap.com
Vendor Advisory

Timeline

No history available yet.