Vulnerabilidades do SAP SE Sap Basis
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam SAP SE Sap Basis: 3 registro(s), com versões afetadas e correções.cpe:2.3:a:sap:sap_basis
CVE-2026-24312
Média · 5.2
CWE-862 10/02/2026
Missing authorization check in SAP Business Workflow
An erroneous authorization check in SAP Business Workflow leads to privilege escalation. An authenticated administrative user can bypass role restrictions by leveraging permissions from a less sensitive function to execute unauthorized, high-privilege actions. This has a high impact on data integrity, with low impact on confidentiality and no impact on availability of the application.
CVE-2026-23687
Alta · 8.8
CWE-347 10/02/2026
XML Signature Wrapping in SAP NetWeaver AS ABAP and ABAP Platform
SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. This may result in acceptance of tampered identity information, unauthorized access to sensitive user data and potential disruption of normal system usage.
CVE-2026-0484
Média · 6.5
CWE-862 10/02/2026
Missing Authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA
Due to missing authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA, an authenticated attacker could access a specific transaction code and modify the text data in the system. This vulnerability has a high impact on integrity of the application with no effect on the confidentiality and availability.