SAP SE SAP ABAP Platform vulnerabilities
3 vulnerabilities
Known vulnerabilities in SAP SE SAP ABAP Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2026-89120sap_se · sap abap platformMissing authorization check in SAP ABAP PlatformA regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP. A low-privileged attacker could exploit this to bypass restrictions via specially crafted requests, resulting in high impact on integrity and low impact on confidentiality. There is no impact on availability.EPSS0.24%MediumCVE-2024-27900sap_se · sap abap platform +1 moreMissing Authorization check in SAP ABAP PlatformDue to missing authorization check, attacker with business user account in SAP ABAP Platform - version 758, 795, can change the privacy setting of job templates from shared to private. As a result, the selected template would only be accessible to the owner.EPSS0.39%MediumCVE-2026-58247sap_se · sap abap platformMemory Corruption vulnerability in SAP ABAP PlatformSAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an internal component. This could disclose limited, non-sensitive data from previously used memory, leading to a low on confidentiality, with no impact on integrity and availability of the application.EPSS0.36%