7.7High
CVE-2026-24322Missing Authorization check in SAP Solution Tools Plug-In (ST-PI)
Description
SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing sensitive information to be disclosed. This vulnerability has a high impact on confidentiality and does not affect integrity or availability.
Weakness (CWE):
CWE-862
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| sap | solution tools plug-in | 740 | |
| SAP_SE | SAP Solution Tools Plug-In (ST-PI) | ST-PI 2008_1_700, 2008_1_710, 740, 758 |
References and patches
- https://me.sap.com/notes/3705882
- https://url.sap/sapsecuritypatchday Vendor Advisory
CPE matches (NVD) (4)
cpe:2.3:a:sap:solution_tools_plug-in:740:*:*:*:*:*:*:*cpe:2.3:a:sap:solution_tools_plug-in:758:*:*:*:*:*:*:*cpe:2.3:a:sap:solution_tools_plug-in:2008_1_700:*:*:*:*:*:*:*cpe:2.3:a:sap:solution_tools_plug-in:2008_1_710:*:*:*:*:*:*:*