SAP SE SAP S/4HANA OData Service (Manage Technical Object Structures) vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting SAP SE SAP S/4HANA OData Service (Manage Technical Object Structures): 1 record(s), with affected versions and fixes.
CVE-2026-27676
Medium · 4.3
CWE-862 Apr 13, 2026
Missing Authorization check in SAP S/4HANA OData Service (Manage Technical Object Structures)
Due to missing authorization checks in the SAP S/4HANA OData Service (Manage Technical Object Structures), an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability results in a low impact on integrity, while confidentiality and availability are not impacted.