PT-2026-7226 · Sap · Business Server Pages+2

Published 2026-02-10 · Updated 2026-02-10 · CVE-2026-24327

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP Strategic Enterprise Management (Balanced Scorecard in Business Server Pages) (affected versions not specified)

Description An authenticated attacker could access information they are not authorized to view due to a missing authorization check. This results in a low impact on confidentiality, with no impact on integrity or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-24327

Affected Products

Balanced Scorecard

Business Server Pages

Sap Strategic Enterprise Management

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-24327 · Security Note
• https://osv.dev/vulnerability/CVE-2026-24327 · Vendor Advisory
• https://url.sap/sapsecuritypatchday · Vendor Advisory
• https://me.sap.com/notes/3680390 · Note
• https://twitter.com/VulmonFeeds/status/2021214280087957799 · Twitter Post