CVE-2026-24309CWE-862

Missing Authorization check in SAP NetWeaver Application Server for ABAP

Medium · published March 10, 2026

CVSS v3.1
6.4
EPSS
0%
Percentile
10.4
In the wild
Unconfirmed
What it is

Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module to read, modify or insert entries into the database configuration table of the ABAP system. This unauthorized content change could lead to reduced system performance or interruptions. The vulnerability has low impact on the application's integrity and availability, with no effect on confidentiality.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00209 · 10.4th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-03-10T00:17Z
EPSS history
Timeline
  • 10 MAR 00:17Z
    Missing Authorization check in SAP NetWeaver Application Server for ABAP
    cvelistv5