← CVE Intelligence

CVE-2026-44766

SQL Injection vulnerability in SAP S/4HANA (Intercompany Matching and Reconciliation) PUBLISHED

Description (CNA)

SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged authenticated user to inject malicious input into certain functions, which may be processed by the database without proper validation. This could allow the user to access sensitive information, resulting in high impact on confidentiality, with no impact on integrity and availability of the application.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP S/4HANA (Intercompany Matching and Reconciliation)affected SAPSCORE 136; affected S4CORE 104; affected 105; affected 106; affected 107; affected 108; affected 109

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.