In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation. Gaining access to this information could potentially lead to unauthorized operations within the B1 environment, including modification of company data. This issue results in a high impact on confidentiality and integrity, with no impact on availability.
CVE-2026-24312 is a medium-severity vulnerability in SAP Business Workflow caused by a missing authorization check that allows an authenticated administrative user to escalate privileges by exploiting permissions from less sensitive functions. This flaw primarily impacts data integrity by enabling unauthorized high-privilege actions, while confidentiality and availability impacts are low or none. The vulnerability affects multiple SAP_BASIS versions from 7.52 through 8.16. Exploitation requires authenticated administrative privileges and some user interaction, limiting the attack scope. No known exploits are currently in the wild. European organizations using affected SAP versions could face risks of unauthorized data manipulation within critical business workflows. Mitigation involves applying vendor patches once available, reviewing and tightening role-based access controls, and monitoring administrative activities for suspicious privilege escalations. Countries with significant SAP enterprise deployments and critical industries relying on SAP workflows, such as Germany, France, and the UK, are most likely to be affected.
Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution that consumes excessive system resources, potentially rendering the system unavailable. Successful exploitation results in a denial-of-service condition that impacts availability, while confidentiality and integrity remain unaffected.
CVE-2026-23688 is a medium severity vulnerability in the SAP Fiori App 'Manage Service Entry Sheets - Lean Services' that results from missing authorization checks. Authenticated users can escalate privileges due to the lack of proper authorization enforcement. The vulnerability impacts integrity but does not affect confidentiality or availability. It affects multiple versions of SAP S/4HANA Core (102 through 107). Exploitation requires authenticated access but no user interaction. There are no known exploits in the wild currently. European organizations using affected SAP versions should prioritize patching or implementing compensating controls to prevent unauthorized privilege escalation. This vulnerability is particularly relevant for countries with significant SAP enterprise deployments and critical infrastructure relying on SAP ERP systems. Mitigation involves strict access control reviews, monitoring for unusual privilege escalations, and applying SAP security updates once available.
CVE-2026-23687 is a high-severity vulnerability in SAP NetWeaver AS ABAP and ABAP Platform involving improper verification of cryptographic signatures. An authenticated attacker with normal privileges can obtain a valid signed message and send modified signed XML documents to the verifier. This flaw may lead to acceptance of tampered identity information, unauthorized access to sensitive user data, and disruption of normal system operations.
CVE-2026-23686 is a CRLF injection vulnerability in SAP NetWeaver Application Server Java affecting version LMNWABASICAPPS 7.50. An authenticated attacker with administrative privileges can inject specially crafted content into HTTP headers, leading to improper neutralization of CRLF sequences. This allows manipulation of application-controlled settings through injection of untrusted entries in generated configuration. The vulnerability impacts integrity with low severity, while confidentiality and availability remain unaffected. Exploitation requires high privileges and user interaction, limiting the attack scope. No known exploits are reported in the wild. European organizations using this SAP product should prioritize patching and restrict administrative access to mitigate risk. Countries with significant SAP enterprise deployments and critical infrastructure reliance on SAP NetWeaver are most likely affected.
CVE-2026-23685 is a deserialization vulnerability in the SAP NetWeaver JMS service affecting version J2EE-FRMW 7.50. An attacker with local administrator privileges can submit crafted serialized data that triggers unintended behavior during internal processing, leading to denial of service. The vulnerability impacts system availability but does not affect confidentiality or integrity. Exploitation requires high privileges and no user interaction. The CVSS score is 4.4 (medium severity), reflecting the limited attack vector and impact scope. No known exploits are currently reported in the wild. European organizations using SAP NetWeaver in critical infrastructure or enterprise environments should prioritize patching and monitoring to prevent service disruption.
CVE-2026-23684 is a race condition vulnerability in SAP Commerce Cloud affecting versions HY_COM 2205, COM_CLOUD 2211, and 2211-JDK21. The flaw allows an attacker to manipulate product entries in a shopping cart, potentially causing erroneous product values to be checked out. This vulnerability impacts data integrity but does not affect confidentiality or availability. Exploitation requires no privileges or user interaction but has a high attack complexity. No known exploits are currently in the wild. The CVSS score is 5.9, indicating a medium severity. European organizations using SAP Commerce Cloud for e-commerce operations could face financial discrepancies and transactional errors if exploited. Mitigation involves applying vendor patches once available, implementing strict concurrency controls, and monitoring transaction logs for anomalies. Countries with significant SAP Commerce Cloud deployments and strong e-commerce sectors, such as Germany, the UK, France, and the Netherlands, are most likely to be affected.
CVE-2026-23681 is a medium-severity vulnerability in the SAP Support Tools Plug-In caused by missing authorization checks in certain function modules. An authenticated attacker with low privileges can exploit this flaw to retrieve sensitive system and configuration information. While the vulnerability does not impact system integrity or availability, the disclosure of system details could aid attackers in planning further attacks. The affected SAP Support Tools Plug-In versions include ST-PI 2008_1_700, 2008_1_710, 740, and 758. Exploitation requires authentication but no user interaction. No known public exploits exist yet. European organizations using these SAP versions should prioritize patching or mitigating this issue to prevent information leakage that could facilitate more severe attacks.
CVE-2026-0509 is a critical vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform that allows authenticated, low-privileged users to execute background Remote Function Calls (RFCs) without proper S_RFC authorization. This missing authorization (CWE-862) can lead to significant integrity and availability impacts, as attackers can perform unauthorized operations affecting system processes. The vulnerability does not impact confidentiality but can severely disrupt business-critical SAP environments. It affects multiple versions of SAP NetWeaver and ABAP Platform, including widely used releases such as 7.53, 7.54, 7.77, and 9.16 through 9.19. Exploitation requires authentication but no user interaction, and the vulnerability has a high CVSS score of 9.
The SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker with high privileges to insert malicious URL within the application. Upon successful exploitation, the victim may click on this malicious URL, resulting in an unvalidated redirect to the attacker-controlled domain and subsequently download the malicious content. This vulnerability has a high impact on the confidentiality and integrity of the application, with no effect on the availability of the application.
CVE-2026-0505 is a medium severity vulnerability in SAP Document Management System's BSP applications that allows unauthenticated attackers to manipulate URL parameters insufficiently validated, resulting in unvalidated redirection to attacker-controlled sites. This vulnerability stems from improper neutralization of input (CWE-79) and can impact confidentiality and integrity with no effect on availability. Exploitation requires user interaction but no authentication, and the vulnerability affects multiple SAP_APPL and S4CORE versions widely used in enterprise environments. While no known exploits are currently in the wild, the vulnerability's scope and ease of exploitation necessitate prompt mitigation. European organizations using affected SAP versions should prioritize patching and implement strict URL validation and monitoring to prevent phishing and redirection attacks. Countries with significant SAP deployments and critical infrastructure reliance on SAP systems are at higher risk. The CVSS score of 6.1 reflects a medium severity level due to the limited impact and required user interaction.
CVE-2026-0490 is a high-severity vulnerability in SAP BusinessObjects BI Platform that allows unauthenticated attackers to send crafted network requests to a trusted endpoint, bypassing authentication. This flaw leads to a denial of service by preventing legitimate users from accessing the platform, impacting availability but not confidentiality or integrity. The vulnerability affects multiple versions, including ENTERPRISE 430, 2025, and 2027. It requires no authentication or user interaction and can be exploited remotely over the network. Although no known exploits are currently in the wild, the high CVSS score of 7.5 reflects the significant availability impact. European organizations relying on SAP BusinessObjects for business intelligence and reporting are at risk of operational disruption. Mitigation involves applying vendor patches once available, restricting network access to trusted endpoints, and monitoring for unusual request patterns. Countries with high SAP adoption and critical industries using SAP BI platforms are most likely to be affected.
An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a generic function module call and execute unauthorized critical functionalities, which includes the ability to execute an arbitrary SQL statement. This leads to a full database compromise with high impact on confidentiality, integrity, and availability.
CVE-2026-0486 is a medium severity vulnerability affecting ABAP based SAP systems where a remote-enabled function module fails to perform necessary authorization checks for authenticated users. This results in unauthorized disclosure of system information, impacting confidentiality with no effect on integrity or availability. The vulnerability affects specific versions including ST-PI 2005_1_700, 2008_1_710, 740, and 758. Exploitation requires network access and authenticated user privileges but no user interaction. Although no known exploits are currently reported in the wild, the vulnerability poses a risk of information leakage that could aid further attacks. European organizations using these SAP versions should prioritize patching or mitigating this issue to prevent unauthorized data exposure. Countries with significant SAP deployments, such as Germany and the UK, are particularly at risk. Mitigation involves strict access control reviews, monitoring for unusual access patterns, and applying SAP security notes once available. Given the medium CVSS score of 5.0, the threat is moderate but should not be overlooked due to the critical role SAP systems play in enterprise operations.
CVE-2026-0485 is a high-severity vulnerability in SAP BusinessObjects BI Platform that allows unauthenticated attackers to cause a denial-of-service by crashing the Content Management Server (CMS) through specially crafted requests. Exploitation leads to repeated CMS crashes and automatic restarts, resulting in persistent service disruption and complete unavailability of the CMS. The vulnerability affects multiple versions including ENTERPRISE 430, 2025, and 2027. No confidentiality or integrity impact is reported, and no user interaction or authentication is required. Although no known exploits are currently in the wild, the ease of exploitation and high impact on availability make this a critical concern for organizations relying on SAP BusinessObjects for business intelligence operations. European organizations using these SAP versions should prioritize mitigation to prevent operational disruptions. Specific mitigations include network-level filtering, strict access controls, and monitoring for anomalous CMS requests. Countries with high SAP adoption and critical industries such as Germany, France, and the UK are most likely to be affected.
CVE-2026-0484 is a medium-severity vulnerability in SAP NetWeaver Application Server ABAP and SAP S/4HANA that allows an authenticated attacker with limited privileges to exploit a missing authorization check. This flaw enables modification of text data within the system, impacting data integrity without affecting confidentiality or availability. The vulnerability arises from improper validation related to URL redirection (CWE-601) and affects multiple SAP_BASIS versions from 700 through 816. Exploitation requires authentication but no user interaction, and no known exploits are currently reported in the wild. The vulnerability's impact is primarily on the integrity of application data, which could lead to unauthorized changes in business-critical information. European organizations using affected SAP versions are at risk, especially those with extensive SAP deployments in finance, manufacturing, and supply chain sectors. Mitigation requires applying SAP patches once available and implementing strict access controls and monitoring of transaction codes. Countries with significant SAP market penetration and critical infrastructure relying on SAP, such as Germany, France, and the UK, are most likely to be affected. The CVSS score of 6.5 reflects a medium severity due to the integrity impact and the need for authenticated access.
SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on confidentiality, integrity and availability are not impacted.
Due to a Cross-Site Scripting (XSS) vulnerability in SAP Business Connector, an unauthenticated attacker could craft a malicious link. When an unsuspecting user clicks this link, the user may be redirected to a site controlled by the attacker. Successful exploitation could allow the attacker to access or modify information related to the webclient, impacting confidentiality and integrity, with no effect on availability.
Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site.This causes low impact on integrity of the application. Confidentiality and availability are not impacted.
