SAP SE Webclient Ui Framework vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting SAP SE Webclient Ui Framework: 1 record(s), with affected versions and fixes.
cpe:2.3:a:sap:webclient_ui_framework

CVE-2026-0488 Critical · 9.9 CWE-862 Feb 10, 2026

Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor)

An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a generic function module call and execute unauthorized critical functionalities, which includes the ability to execute an arbitrary SQL statement. This leads to a full database compromise with high impact on confidentiality, integrity, and availability.