← Database

CVE-2026-34261

MEDIUM CVSS: 6.5 Published: 2026-04-14 Modified: 2026-06-17

Description

Due to a missing authorization check in SAP Business Analytics and SAP Content Management, an authenticated user could make unauthorized calls to certain remote function modules, potentially accessing sensitive information beyond their intended permissions. This vulnerability affects confidentiality, with no impact on integrity and availability.

Affected Platforms

Unknown

Weakness Type

CWE-862

References