Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-34261 EUVD-2026-22170

Missing Authorization check in SAP Business Analytics and SAP Content Management

Published Apr 14, 2026 · Updated Apr 14, 2026 · Assigned by sap

Vendor: SAP Product: SAP Business Analytics and SAP Content Management

Description

Due to a missing authorization check in SAP Business Analytics and SAP Content Management, an authenticated user could make unauthorized calls to certain remote function modules, potentially accessing sensitive information beyond their intended permissions. This vulnerability affects confidentiality, with no impact on integrity and availability.

Affected products

VendorProductAffectedFixed
SAP_SE SAP Business Analytics and SAP Content Management S4HCMRXX 100, 101, 102, SAP_HRRXX 600, 604, 608 —

Advisories 2

References