CVE-2026-34261 — Missing Authorization check in SAP Business Analytics and SAP Content Management

CVE-2026-34261

Missing Authorization check in SAP Business Analytics and SAP Content Management PUBLISHED

Description (CNA)

Due to a missing authorization check in SAP Business Analytics and SAP Content Management, an authenticated user could make unauthorized calls to certain remote function modules, potentially accessing sensitive information beyond their intended permissions. This vulnerability affects confidentiality, with no impact on integrity and availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Business Analytics and SAP Content Management	affected S4HCMRXX 100; affected 101; affected 102; affected SAP_HRRXX 600; affected 604; affected 608

CWE

CWE-862

References

https://me.sap.com/notes/3705094
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.