CVE-2026-0484: SAP_SE SAP NetWeaver Application Server ABAP and SAP

Описание

Оригинално описание

Due to missing authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA, an authenticated attacker could access a specific transaction code and modify the text data in the system. This vulnerability has a high impact on integrity of the application with no effect on the confidentiality and availability.

Засегнати продукти

• SAP_SE SAP NetWeaver Application Server ABAP and SAP S/4HANA: SAP_BASIS 700; SAP_BASIS 701; SAP_BASIS 702; SAP_BASIS 731; SAP_BASIS 740; SAP_BASIS 750; SAP_BASIS 751; SAP_BASIS 752; SAP_BASIS 753; SAP_BASIS 754; SAP_BASIS 755; SAP_BASIS 756; SAP_BASIS 757; SAP_BASIS 758; SAP_BASIS 816

Вид слабост

• CWE-601 URL Redirection to Untrusted Site

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-0484
• https://nvd.nist.gov/vuln/detail/CVE-2026-0484
• https://me.sap.com/notes/3672622
• https://url.sap/sapsecuritypatchday