CVE-2026-23687

概要

参考情報

• me.sap.com/notes/3697567 · Permissions Required
• url.sap/sapsecuritypatchday · Vendor Advisory
• seclists.org/fulldisclosure/2026/Jun/1

sap basis のその他の脆弱性

• CVE-2026-24312中 5.2An erroneous authorization check in SAP Business Workflow leads to privilege escalation. An authenticated administrative user can bypass rol…
• CVE-2026-0484中 6.5Due to missing authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA, an authenticated attacker could access a specif…
• CVE-2025-42918中 4.3SAP NetWeaver Application Server for ABAP allows authenticated users with access to background processing to gain unauthorized read access t…
• CVE-2025-42911中 4.3SAP NetWeaver (Service Data Download) allows an authenticated user to call a remote-enabled function module, which could grant access to inf…
• CVE-2025-42936中 5.4The SAP NetWeaver Application Server for ABAP does not enable an administrator to assign distinguished authorizations for different user rol…