CVE-2026-44769 — SQL Injection vulnerability in SAP S/4HANA Project Management (PPM-PRO)

Description (CNA)

SAP S/4HANA application Project Management (PPM-PRO) allows an attacker with high privileges to execute crafted database queries, exposing the backend database. This results in low impact on confidentiality, with no impact on integrity and availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP S/4HANA Project Management (PPM-PRO)	affected SAP_APPL 600; affected 602; affected 603; affected 604; affected 605; affected 606; affected 617; affected 618; affected S4CORE 102; affected 103; affected 104; affected 105; affected 106; affected 107; affected 108; affected CPRXRPM 400; affected 450_700; affected 500_702; affected 610_740

CWE

CWE-89

References

https://me.sap.com/notes/3537373
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.