CVE-2026-44765

Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated remote attacker could access scheduling-related application functions without proper authorization validation. Successful exploitation could allow the attacker to retrieve, create, modify, or delete application-managed scheduling data, causing a low impact on confidentiality, integrity, and availability.

Score
CVSS 3.1 7.3 High
Status
Awaiting Analysis - cna@sap.com
Published
2026-08-11
Last modified
2026-10-23
Weaknesses
CWE-862

Affected products

References

 
 
© AVABIS GmbH privacypolicy about