CVE-2026-24309 - Missing Authorization check in SAP NetWeaver Application Server for ABAP

CVE-2026-24309 - Missing Authorization check in SAP NetWeaver Application Server for ABAP

CVE ID :CVE-2026-24309 Published : March 10, 2026, 12:17 a.m. | 2 hours, 24 minutes ago Description :Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module to read, modify or insert entries into the database configuration table of the ABAP system. This unauthorized content change could lead to reduced system performance or interruptions. The vulnerability has low impact on the application's integrity and availability, with no effect on confidentiality. Severity: 6.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
LOW
Published
March 10, 2026