CVE-2026-58245

Summary

SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential within the source code of the application to perform authorization check to access certain functionalities in the application. An attacker with high privileges could leverage this hardcoded credential to bypass authorization and delete specific planning-related restrictions in the application. Successful exploitation could result in a low impact on confidentiality and integrity, with no impact on availability of the application.

Affected Software

VendorProductVersion RangeStatus
SAP_SESAP Advanced Planning and Optimization (Model Mix Planning)SCMAPO 713affected
SAP_SESAP Advanced Planning and Optimization (Model Mix Planning)714affected
SAP_SESAP Advanced Planning and Optimization (Model Mix Planning)S4CORE 102affected
SAP_SESAP Advanced Planning and Optimization (Model Mix Planning)103affected
SAP_SESAP Advanced Planning and Optimization (Model Mix Planning)104affected
SAP_SESAP Advanced Planning and Optimization (Model Mix Planning)S4COREOP 104affected
SAP_SESAP Advanced Planning and Optimization (Model Mix Planning)105affected
SAP_SESAP Advanced Planning and Optimization (Model Mix Planning)106affected
SAP_SESAP Advanced Planning and Optimization (Model Mix Planning)107affected
SAP_SESAP Advanced Planning and Optimization (Model Mix Planning)108affected
SAP_SESAP Advanced Planning and Optimization (Model Mix Planning)109affected
SAP_SESAP Advanced Planning and Optimization (Model Mix Planning)SCM 700affected
SAP_SESAP Advanced Planning and Optimization (Model Mix Planning)701affected
SAP_SESAP Advanced Planning and Optimization (Model Mix Planning)702affected
SAP_SESAP Advanced Planning and Optimization (Model Mix Planning)712affected

Weaknesses

  • CWE-798: CWE-798: Use of Hard-coded Credentials

References