cbcvebase.
CVE-2026-0484
published 2026-02-10

CVE-2026-0484: Due to missing authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA, an authenticated attacker could access a specific transaction code…

medium6.5CVSS 3.1
AVNACLPRLUINSUCNIHAN
Due to missing authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA, an authenticated attacker could access a specific transaction code and modify the text data in the system. This vulnerability has a high impact on integrity of the application with no effect on the confidentiality and availability.

Affected

30 ranges· showing 25
VendorProductVersion rangeFixed in
sapsap_basis
sapsap_basis
sapsap_basis
sapsap_basis
sapsap_basis
sapsap_basis
sapsap_basis
sapsap_basis
sapsap_basis
sapsap_basis
sapsap_basis
sapsap_basis
sapsap_basis
sapsap_basis
sapsap_basis
sap_sesap_netweaver_application_server_abap_and_sap_s_4hana
sap_sesap_netweaver_application_server_abap_and_sap_s_4hana
sap_sesap_netweaver_application_server_abap_and_sap_s_4hana
sap_sesap_netweaver_application_server_abap_and_sap_s_4hana
sap_sesap_netweaver_application_server_abap_and_sap_s_4hana
sap_sesap_netweaver_application_server_abap_and_sap_s_4hana
sap_sesap_netweaver_application_server_abap_and_sap_s_4hana
sap_sesap_netweaver_application_server_abap_and_sap_s_4hana
sap_sesap_netweaver_application_server_abap_and_sap_s_4hana
sap_sesap_netweaver_application_server_abap_and_sap_s_4hana