Skip to content
OpenAdvisories
Medium · 5.8 CVE-2026-27687 EUVD-2026-10460GHSA-7ww9-jwvc-34pg

Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal

Published Mar 10, 2026 · Updated Mar 10, 2026 · Assigned by sap

Vendor: SAP Product: SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal

Description

Due to missing authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal, a user with high privileges could access sensitive data belonging to another company. This vulnerability has a high impact on confidentiality and does not affect integrity and availability.

Affected products

VendorProductAffectedFixed
SAP_SE SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal S4HCMCPT 100, 101, 102, SAP_HRCPT 600, 604, 608 —

Advisories 2

References