PT-2026-2333 · Sap · Sap Product Designer Web Ui+1

Published 2026-01-12 · Updated 2026-01-13 · CVE-2026-0497

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP Product Designer Web UI of Business Server Pages (affected versions not specified)

Description The SAP Product Designer Web UI of Business Server Pages allows authenticated, non-administrative users to access non-sensitive information. This results in a low impact on confidentiality, with no impact on integrity or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

BDU:2026-00766

CVE-2026-0497

Affected Products

Business Server Pages

Sap Product Designer Web Ui

References · 6

• https://bdu.fstec.ru/vul/2026-00766 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-0497 · Security Note
• https://twitter.com/CVEnew/status/2010911105879601216 · Twitter Post
• https://me.sap.com/notes/3677111 · Note
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/january-2026.html · Note
• https://url.sap/sapsecuritypatchday · Note