cveboard RSS feed

CVE-2026-27681

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2026
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

SQL Injection vulnerability in SAP Business Planning and Consolidation and SAP Business Warehouse

Due to insufficient authorization checks in SAP Business Planning and Consolidation and SAP Business Warehouse, an authenticated user can execute crafted SQL statements to read, modify, and delete database data. This leads to a high impact on the confidentiality, integrity, and availability of the system.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

SAP Business Planning and Consolidation and SAP Business Warehouse

Vendor
SAP_SE
Product
SAP Business Planning and Consolidation and SAP Business Warehouse
Platforms
Unknown
Default status
unaffected
SAP Business Planning and Consolidation and SAP Business Warehouse · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
HANABPC 810affectedUnavailableUnavailableUnavailableNone listed
BPC4HANA 300affectedUnavailableUnavailableUnavailableNone listed
SAP_BW 750affectedUnavailableUnavailableUnavailableNone listed
752affectedUnavailableUnavailableUnavailableNone listed
753affectedUnavailableUnavailableUnavailableNone listed
754affectedUnavailableUnavailableUnavailableNone listed
755affectedUnavailableUnavailableUnavailableNone listed
756affectedUnavailableUnavailableUnavailableNone listed
757affectedUnavailableUnavailableUnavailableNone listed
758affectedUnavailableUnavailableUnavailableNone listed
816affectedUnavailableUnavailableUnavailableNone listed