Riskcovery

CVE-2026-34261

Missing Authorization check in SAP Business Analytics and SAP Content Management

State
Published
Severity
6.5 Medium
Published
Apr 14, 2026
Updated
Apr 14, 2026
Reserved
Mar 26, 2026

Read the record on cve.org

Description

Due to a missing authorization check in SAP Business Analytics and SAP Content Management, an authenticated user could make unauthorized calls to certain remote function modules, potentially accessing sensitive information beyond their intended permissions. This vulnerability affects confidentiality, with no impact on integrity and availability.

Scores

CVSSScoreVectorSource
3.16.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nsap

Weaknesses

Affected Products

ProductVersions
SAP Business Analytics and SAP Content ManagementSAP_SE
  • S4HCMRXX 100Affected
  • 101Affected
  • 102Affected
  • SAP_HRRXX 600Affected
  • 604Affected
  • 608Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.