GHSA-c6hc-8mm4-9853

GHSA-c6hc-8mm4-9853 PUBLISHED CVSS 5.900000095367432 MEDIUM

Due to a Missing Authorization Check in SAP Business Warehouse (Service API), an authenticated attacker could perform unauthorized actions via an affected RFC function module. Successful exploitation could enable unauthorized configuration and control changes, potentially disrupting request processing and causing denial of service. This results in low impact on integrity and high impact on availability, while confidentiality remains unaffected.

Risk Scores

CVSS 3.1

5.900000095367432

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

Timeline

Mar 10, 2026 CVE Published
Apr 10, 2026 Security Advisory

References

https://nvd.nist.gov/vuln/detail/CVE-2026-27686 advisory
https://me.sap.com/notes/3703385 url
https://url.sap/sapsecuritypatchday url

Open in Interactive Console →