CVE record · 1 source
CVE-2026-89121
CVSS 4.7SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data.
- Vendor
- SAP
- Product
- S/4HANA / HANA
- CVSS
- 4.7
- Exposure class
- Database
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data.
SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data. An attacker with low privileges and local access to the system could bypass…