Threats Tagged 'cve-2026-0484'

CVE-2026-0484 is a medium-severity vulnerability in SAP NetWeaver Application Server ABAP and SAP S/4HANA that allows an authenticated attacker with limited privileges to exploit a missing authorization check. This flaw enables modification of text data within the system, impacting data integrity without affecting confidentiality or availability. The vulnerability arises from improper validation related to URL redirection (CWE-601) and affects multiple SAP_BASIS versions from 700 through 816. Exploitation requires authentication but no user interaction, and no known exploits are currently reported in the wild. The vulnerability's impact is primarily on the integrity of application data, which could lead to unauthorized changes in business-critical information. European organizations using affected SAP versions are at risk, especially those with extensive SAP deployments in finance, manufacturing, and supply chain sectors. Mitigation requires applying SAP patches once available and implementing strict access controls and monitoring of transaction codes. Countries with significant SAP market penetration and critical infrastructure relying on SAP, such as Germany, France, and the UK, are most likely to be affected. The CVSS score of 6.5 reflects a medium severity due to the integrity impact and the need for authenticated access.

MediumVulnerabilityGermanyFranceNetherlands+5#cve#cve-2026-0484#cwe-601