CVE-2026-34261CWE-862

Missing Authorization check in SAP Business Analytics and SAP Content Management

Medium · published April 14, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
27.8
In the wild
Unconfirmed
What it is

Due to a missing authorization check in SAP Business Analytics and SAP Content Management, an authenticated user could make unauthorized calls to certain remote function modules, potentially accessing sensitive information beyond their intended permissions. This vulnerability affects confidentiality, with no impact on integrity and availability.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00354 · 27.8th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-04-14T00:08Z
EPSS history
Timeline
  • 14 APR 00:08Z
    Missing Authorization check in SAP Business Analytics and SAP Content Management
    cvelistv5