PT-2026-57947 · Sap Se · Sap S/4Hana

Publicado 2026-07-14 · Atualizado 2026-07-14 · CVE-2026-44771

Mitre

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

SAP S/4HANA Draft operation does not perform necessary authorization checks for an authenticated user, a restricted user could access information within the entity resulting in escalation of privileges. This results in low impact on confidentiality, with no impact on integrity and availability of the application.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-44771

Produtos afetados

Sap S/4Hana

Referências · 3

• https://url.sap/sapsecuritypatchday · Nota
• https://me.sap.com/notes/3515598 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-44771 · Nota de Segurança