Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-27678

Опубликовано: 14 апр. 2026
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

Due to missing authorization checks in the SAP S/4HANA backend OData Service (Manage Reference Structures), an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability has a high impact on integrity, while confidentiality and availability are not impacted.

EPSS

Процентиль: 8%
0.00181
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 6.5
github
4 месяца назад

Due to missing authorization checks in the SAP S/4HANA backend OData Service (Manage Reference Structures), an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability has a high impact on integrity, while confidentiality and availability are not impacted.

CVSS3: 6.5
fstec
4 месяца назад

Уязвимость службы OData программной платформы SAP S/4HANA, позволяющая нарушителю нарушить целостность защищаемой информации

EPSS

Процентиль: 8%
0.00181
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862