CVE-2026-24322 — Missing Authorization check in SAP Solution Tools Plug-In (ST-PI)

CVE-2026-24322

Missing Authorization check in SAP Solution Tools Plug-In (ST-PI) PUBLISHED

Description (CNA)

SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing sensitive information to be disclosed. This vulnerability has a high impact on confidentiality and does not affect integrity or availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Solution Tools Plug-In (ST-PI)	affected ST-PI 2008_1_700; affected 2008_1_710; affected 740; affected 758

CWE

CWE-862

References

https://me.sap.com/notes/3705882
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.