PT-2026-32570 · Sap · Sap Human Capital Management For Sap S/4Hana

Published 2026-04-14 · Updated 2026-05-04 · CVE-2026-34264

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP Human Capital Management for SAP S/4HANA (affected versions not specified)

Description During authorization checks, the system returns specific messages that allow an authenticated user with low privileges to guess and enumerate content beyond their authorized scope. This results in the disclosure of sensitive information, impacting confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-204

Related Identifiers

BDU:2026-05450

CVE-2026-34264

Affected Products

Sap Human Capital Management For Sap S/4Hana

References · 9

• https://bdu.fstec.ru/vul/2026-05450 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-34264 · Security Note
• https://twitter.com/CVEnew/status/2043976154667700335 · Twitter Post
• https://me.sap.com/notes/3680767 · Note
• https://t.me/cveNotify/162027 · Telegram Post
• https://url.sap/sapsecuritypatchday · Note
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/april-2026.html · Note
• https://twitter.com/CVEarity/status/2044084417770217914 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2043988145658601507 · Twitter Post