Description
SAP MDG (Review Match Groups Application) does not perform the necessary authorization checks for authenticated users. This could allow a low-privileged user to perform actions that would otherwise be restricted, resulting in escalation of privileges. This has a low impact on integrity, while confidentiality and availability are not impacted.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP MDG (Review Match Groups Application) | S4CORE 108, SAP_BASIS 916, SAP_BASIS 917, SAP_ABA 816 | — |
Advisories 1
- WID-SEC-2026-1831 SAP Patchday Juni 2026: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 8, 2026