CVE 4.3 MEDIUM

Missing Authorization check in SAP Fiori App (Manage Service Entry Sheets – Lean Services)_CVE-2026-23688

4.3 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Description

SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on integrity, confidentiality and availability are not impacted.

Basic Information

ID CVE-2026-23688
Source sap
Published Feb 10, 2026 at 03:02

Affected Product

Vendor SAP_SE
Product SAP Fiori App (Manage Service Entry Sheets - Lean Services)
Version S4CORE 102
Affected Versions SAP_SE SAP Fiori App (Manage Service Entry Sheets - Lean Services) S4CORE 102
SAP_SE SAP Fiori App (Manage Service Entry Sheets - Lean Services) 103
SAP_SE SAP Fiori App (Manage Service Entry Sheets - Lean Services) 104
SAP_SE SAP Fiori App (Manage Service Entry Sheets - Lean Services) 105
SAP_SE SAP Fiori App (Manage Service Entry Sheets - Lean Services) 106
SAP_SE SAP Fiori App (Manage Service Entry Sheets - Lean Services) 107

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.