Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fg5q-rjfh-rr88

Опубликовано: 14 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Due to a missing authorization check in SAP Business Analytics and SAP Content Management, an authenticated user could make unauthorized calls to certain remote function modules, potentially accessing sensitive information beyond their intended permissions. This vulnerability affects confidentiality, with no impact on integrity and availability.

Due to a missing authorization check in SAP Business Analytics and SAP Content Management, an authenticated user could make unauthorized calls to certain remote function modules, potentially accessing sensitive information beyond their intended permissions. This vulnerability affects confidentiality, with no impact on integrity and availability.

EPSS

Процентиль: 12%
0.00213
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 6.5
nvd
4 месяца назад

Due to a missing authorization check in SAP Business Analytics and SAP Content Management, an authenticated user could make unauthorized calls to certain remote function modules, potentially accessing sensitive information beyond their intended permissions. This vulnerability affects confidentiality, with no impact on integrity and availability.

CVSS3: 6.5
fstec
4 месяца назад

Уязвимость платформы бизнес-аналитики SAP Business Analytics и CMS-системы SAP Content Management, связанная с недостатками процедуры авторизации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 12%
0.00213
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862