CVE-2026-44770
4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Summary
SAP Create Single Payment does not perform necessary authorization checks for an authenticated user, a restricted user could access specific entity set keys resulting in disclosure of information. This has low impact on confidentiality, with no impact on integrity and availability of the application.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SAP_SE | SAP S/4 HANA (Create Single Payment) | S4CORE 102 | affected |
| SAP_SE | SAP S/4 HANA (Create Single Payment) | 103 | affected |
| SAP_SE | SAP S/4 HANA (Create Single Payment) | 104 | affected |
| SAP_SE | SAP S/4 HANA (Create Single Payment) | 105 | affected |
| SAP_SE | SAP S/4 HANA (Create Single Payment) | 106 | affected |
| SAP_SE | SAP S/4 HANA (Create Single Payment) | 107 | affected |
| SAP_SE | SAP S/4 HANA (Create Single Payment) | 108 | affected |
| SAP_SE | SAP S/4 HANA (Create Single Payment) | 109 | affected |
Weaknesses
- CWE-862: CWE-862: Missing Authorization
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.