CVE-2026-24310: Missing Authorization check in SAP NetWeaver Application Server for ABAP
Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module and read the sensitive information from database catalog of the ABAP system. This vulnerability has low impact on the application's confidentiality with no effect on the integrity and availability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-24310?
CVE-2026-24310 is classified as a high severity vulnerability due to its potential for authenticated attackers to access sensitive information.
How do I fix CVE-2026-24310?
To remediate CVE-2026-24310, apply the security patches provided by SAP for the NetWeaver Application Server for ABAP.
Who is affected by CVE-2026-24310?
CVE-2026-24310 impacts instances of SAP NetWeaver Application Server for ABAP that have not implemented proper authorization checks.
What does CVE-2026-24310 allow an attacker to do?
CVE-2026-24310 allows authenticated attackers to execute specific ABAP function modules and retrieve sensitive database information.
Is CVE-2026-24310 exploitable remotely?
CVE-2026-24310 requires authentication, but once an attacker is authenticated, it can be exploited to access sensitive data.