Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8pxq-pw5m-8q7x

Опубликовано: 14 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Due to missing authorization checks in the SAP S/4HANA backend OData Service (Manage Reference Structures), an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability has a high impact on integrity, while confidentiality and availability are not impacted.

Due to missing authorization checks in the SAP S/4HANA backend OData Service (Manage Reference Structures), an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability has a high impact on integrity, while confidentiality and availability are not impacted.

EPSS

Процентиль: 8%
0.00181
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 6.5
nvd
4 месяца назад

Due to missing authorization checks in the SAP S/4HANA backend OData Service (Manage Reference Structures), an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability has a high impact on integrity, while confidentiality and availability are not impacted.

CVSS3: 6.5
fstec
4 месяца назад

Уязвимость службы OData программной платформы SAP S/4HANA, позволяющая нарушителю нарушить целостность защищаемой информации

EPSS

Процентиль: 8%
0.00181
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862