CVE-2026-24311 — MEDIUM (5.6)

Vulnerability Description

The SAP Customer Checkout application exhibits certain design characteristics that involve locally storing operational data using reversible protection mechanisms. Access to this data, combined with user?initiated interaction, may allow modifications to occur without validation. Such changes could affect system behaviour during startup, resulting in a high impact on the application's confidentiality and integrity, with a low impact on availability.

CVSS Score

5.6

MEDIUM

CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

LOW

Related Weaknesses (CWE)

CWE-312

References

FAQ

What is CVE-2026-24311?

CVE-2026-24311 is a vulnerability with a CVSS score of 5.6 (MEDIUM). The SAP Customer Checkout application exhibits certain design characteristics that involve locally storing operational data using reversible protection mechanisms. Access to this data, combined with u...

How severe is CVE-2026-24311?

CVE-2026-24311 has been rated MEDIUM with a CVSS base score of 5.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-24311?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.