Vulnetix
Try Vulnetix Request Demo
CVE-2026-34261 PUBLISHED CVSS 6.5 MEDIUM

Due to a missing authorization check in SAP Business Analytics and SAP Content Management, an authenticated user could make unauthorized calls to certain remote function modules, potentially accessing sensitive information beyond their intended permissions. This vulnerability affects confidentiality, with no impact on integrity and availability.

Risk Scores

CVSS v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
SAP_SESAP Business Analytics and SAP Content ManagementS4HCMRXX 100, 102, SAP_HRRXX 600

Timeline

References

Open in Interactive Console →