CVE-2026-24310
published 2026-03-10CVE-2026-24310: Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module and read…
PriorityP423medium4.3CVSS 3.1
AVNACLPRLUINSUCLINAN
EPSS
0.19%
9.2th percentile
Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module and read the sensitive information from database catalog of the ABAP system. This vulnerability has low impact on the application's confidentiality with no effect on the integrity and availability.
Affected
26 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap | netweaver_application_server_abap | — | — |
| sap | netweaver_application_server_abap | — | — |
| sap | netweaver_application_server_abap | — | — |
| sap | netweaver_application_server_abap | — | — |
| sap | netweaver_application_server_abap | — | — |
| sap | netweaver_application_server_abap | — | — |
| sap | netweaver_application_server_abap | — | — |
| sap | netweaver_application_server_abap | — | — |
| sap | netweaver_application_server_abap | — | — |
| sap | netweaver_application_server_abap | — | — |
| sap | netweaver_application_server_abap | — | — |
| sap | netweaver_application_server_abap | — | — |
| sap | netweaver_application_server_abap | — | — |
| sap_se | sap_netweaver_application_server_for_abap | — | — |
| sap_se | sap_netweaver_application_server_for_abap | — | — |
| sap_se | sap_netweaver_application_server_for_abap | — | — |
| sap_se | sap_netweaver_application_server_for_abap | — | — |
| sap_se | sap_netweaver_application_server_for_abap | — | — |
| sap_se | sap_netweaver_application_server_for_abap | — | — |
| sap_se | sap_netweaver_application_server_for_abap | — | — |
| sap_se | sap_netweaver_application_server_for_abap | — | — |
| sap_se | sap_netweaver_application_server_for_abap | — | — |
| sap_se | sap_netweaver_application_server_for_abap | — | — |
| sap_se | sap_netweaver_application_server_for_abap | — | — |
| sap_se | sap_netweaver_application_server_for_abap | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
SAP NetWeaver Application Server for ABAP up to 816 authorization (Nessus ID 302162)
vuldb·2026-06-04·CVSS 4.3
CVE-2026-24310 [MEDIUM] SAP NetWeaver Application Server for ABAP up to 816 authorization (Nessus ID 302162)
A vulnerability classified as problematic was found in SAP NetWeaver Application Server for ABAP up to 816. This vulnerability affects unknown code. The manipulation results in missing authorization.
This vulnerability is reported as CVE-2026-24310. The attack can be launched remotely. No exploit exists.
It is best practice to apply a patch to resolve this issue.
GHSA
GHSA-f36c-5pwh-qf89: Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module
ghsa_unreviewed·2026-03-10
CVE-2026-24310 [LOW] CWE-862 GHSA-f36c-5pwh-qf89: Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module
Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module and read the sensitive information from database catalog of the ABAP system. This vulnerability has low impact on the application's confidentiality with no effect on the integrity and availability.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-03-10
Published