CVE-2026-24322

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-24322
SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing sensitive information to be disclosed. This vulnerability has a high impact on confidentiality and does not affect integrity or availability.

7.7 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.1 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://me.sap.com/notes/3705882 Permissions Required
https://url.sap/sapsecuritypatchday Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:sap:solution_tools_plug-in:740:*:*:*:*:*:*:*
cpe:2.3:a:sap:solution_tools_plug-in:758:*:*:*:*:*:*:*
cpe:2.3:a:sap:solution_tools_plug-in:2008_1_700:*:*:*:*:*:*:*
cpe:2.3:a:sap:solution_tools_plug-in:2008_1_710:*:*:*:*:*:*:*
History

17 Feb 2026, 15:23

Type Values Removed Values Added
CPE cpe:2.3:a:sap:solution_tools_plug-in:740:*:*:*:*:*:*:*
cpe:2.3:a:sap:solution_tools_plug-in:2008_1_700:*:*:*:*:*:*:*
cpe:2.3:a:sap:solution_tools_plug-in:758:*:*:*:*:*:*:*
cpe:2.3:a:sap:solution_tools_plug-in:2008_1_710:*:*:*:*:*:*:*
Summary
  • (es) SAP Solution Tools Plug-In (ST-PI) contiene un módulo de función que no realiza las comprobaciones de autorización necesarias para usuarios autenticados, permitiendo que se divulgue información sensible. Esta vulnerabilidad tiene un alto impacto en la confidencialidad y no afecta a la integridad ni a la disponibilidad.
References () https://me.sap.com/notes/3705882 - () https://me.sap.com/notes/3705882 - Permissions Required
References () https://url.sap/sapsecuritypatchday - () https://url.sap/sapsecuritypatchday - Vendor Advisory
First Time Sap
Sap solution Tools Plug-in

10 Feb 2026, 04:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-02-10 04:16

Updated : 2026-02-17 15:23

NVD link : CVE-2026-24322

Mitre link : CVE-2026-24322

CVE.ORG link : CVE-2026-24322

JSON object : View

Products Affected

sap

  • solution_tools_plug-in
CWE
CWE-862

Missing Authorization