AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SAPCVE-2026-44769

SAP S/4HANA Project Management (PPM-PRO): SQL injection

SAP

CVE-2026-44769 · Published Jul 14, 2026

Medium5.5
No fix yet
SAP advisory

SAP S/4HANA application Project Management (PPM-PRO) allows an attacker with high privileges to execute crafted database queries, exposing the backend database. This results in low impact on confidentiality, with no impact on integrity and availability of the application.

Affected versions

PackageAffectedFixed in
SAP S/4HANA Project Management (PPM-PRO)
Product
<= SAP_APPL 600No fix yet
<= 602No fix yet
<= 603No fix yet
<= 604No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-89

More SAP advisories

All SAP
Critical 9.1Jul 14SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented...CVE-2026-44761no fix yetMedium 6.1Jul 14SAP @ui5/webcomponents-base: clickjackingCVE-2026-44767no fix yetMedium 4.1Jul 14SAP WebClient UI: attacker could injectCVE-2026-44768no fix yetMedium 4.3Jul 14SAP S/4 HANA (Create Single Payment): missing authorizationCVE-2026-44770no fix yetMedium 4.3Jul 14SAP S/4HANA (Draft operation): privilege escalationCVE-2026-44771no fix yetHigh 7.6Jul 14SAP Change and Transport System Attach Tool (ctsattach): unsafe deserializationCVE-2026-58233no fix yet