SAP SE SAP CRM and SAP S/4HANA (Scripting Editor) vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting SAP SE SAP CRM and SAP S/4HANA (Scripting Editor): 1 record(s), with affected versions and fixes.

CVE-2026-0488 Critical · 9.9 CWE-862 Feb 10, 2026

Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor)

An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a generic function module call and execute unauthorized critical functionalities, which includes the ability to execute an arbitrary SQL statement. This leads to a full database compromise with high impact on confidentiality, integrity, and availability.