CVE-2026-34264CWE-204

Information Disclosure vulnerability in SAP Human Capital Management for SAP S/4HANA

Medium · published April 14, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
32.2
In the wild
Unconfirmed
What it is

During authorization checks in SAP Human Capital Management for SAP S/4HANA, the system returns specific messages. Due to this, an authenticated user with low privileges could guess and enumerate the content shown, beyond their authorized scope. This leads to disclosure of sensitive information causing a high impact on confidentiality, while integrity and availability are unaffected.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00392 · 32.2th percentile
Weakness
CWE-204 · Observable Response Discrepancy
Published
2026-04-14T00:09Z
EPSS history
Timeline
  • 14 APR 00:09Z
    Information Disclosure vulnerability in SAP Human Capital Management for SAP S/4HANA
    cvelistv5