Vulnerabilidades do SAP SE SAP S/4HANA (Private Cloud and On-Premise)
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam SAP SE SAP S/4HANA (Private Cloud and On-Premise): 2 registro(s), com versões afetadas e correções.
CVE-2026-27673
Média · 4.9
CWE-862 13/04/2026
Missing Authorization Check in SAP S/4HANA (Private Cloud and On-Premise)
Due to a missing authorization check, SAP S/4HANA (Private Cloud and On-Premise) allows an authenticated user to delete files on the operating system and gain unauthorized control over file operations which could leads to no impact on Confidentiality, Low impact on Integrity and Availability of the application.
CVE-2026-0498
Alta · 7.2
CWE-94 12/01/2026
Code Injection vulnerability in SAP S/4HANA (Private Cloud and On-Premise)
SAP S/4HANA (Private Cloud and On-Premise) allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code/OS commands into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.