CVE-2026-0484 — MEDIUM (6.5)

Vulnerability Description

Due to missing authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA, an authenticated attacker could access a specific transaction code and modify the text data in the system. This vulnerability has a high impact on integrity of the application with no effect on the confidentiality and availability.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Sap	Sap Basis	700

Related Weaknesses (CWE)

CWE-601 CWE-862

References

https://me.sap.com/notes/3672622Permissions Required
https://url.sap/sapsecuritypatchdayVendor Advisory

FAQ

What is CVE-2026-0484?

CVE-2026-0484 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Due to missing authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA, an authenticated attacker could access a specific transaction code and modify the text data in the system. ...

How severe is CVE-2026-0484?

CVE-2026-0484 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-0484?

Check the references section above for vendor advisories and patch information. Affected products include: Sap Sap Basis.