Advisoriesby IbisSAPCVE-2026-58241
SAP NetWeaver and ABAP: missing authorization
No fix yet
SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) allows a low-privileged user to modify configuration tables that control access to data objects during specific operations. These unauthorized modifications could result in processing delays and operational disruption, leading to a low impact on the integrity and availability of the application with no impact on confidentiality.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard Product | <= SAP_BASIS 740 | No fix yet |
| <= SAP_BASIS 750 | No fix yet | |
| <= SAP_BASIS 751 | No fix yet | |
| <= SAP_BASIS 752 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-862