VULNERABILITY INTELLIGENCE

CVE-2026-44769

CVSS score5.5 MEDIUM
EPSS probability0.31%
CISA KEVNot currently listed
Published2026-07-14
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:L

Description

SAP S/4HANA application Project Management (PPM-PRO) allows an attacker with high privileges to execute crafted database queries, exposing the backend database. This results in low impact on confidentiality, with no impact on integrity and availability of the application.

Weakness classification

  • cna@sap.com: CWE-89

Primary references