SAP SE SAP ABAP Platform vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting SAP SE SAP ABAP Platform: 2 record(s), with affected versions and fixes.
CVE-2026-89120
High · 7.1
CWE-1188 Oct 12, 2026
Missing authorization check in SAP ABAP Platform
A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP. A low-privileged attacker could exploit this to bypass restrictions via specially crafted requests, resulting in high impact on integrity and low impact on confidentiality. There is no impact on availability.
CVE-2026-58247
Medium · 5.3
CWE-908 Aug 10, 2026
Memory Corruption vulnerability in SAP ABAP Platform
SAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an internal component. This could disclose limited, non-sensitive data from previously used memory, leading to a low on confidentiality, with no impact on integrity and availability of the application.