Approved changes feed: RSS · Atom

cpe:2.3:a:sap:solution_tools_plug-in:2008_1_710:*:*:*:*:*:*:*

part: a version: 2008_1_710 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductSolution Tools Plug In (aefe3364-57c3-55ff-aa86-9a6a12082722)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-24322 vulnerable 2026-06-08 07:51:17.500480 Missing Authorization check in SAP Solution Tools Plug-In (ST-PI)
HIGH (7.7)
SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing sensitive information to be disclosed. This vulnerability has a high impact on confidentiality and does not affect integrity or availability.
Published: 2026-02-10T03:04:01.992Z
Updated: 2026-02-10T17:00:38.519Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-23681 vulnerable 2026-06-08 07:51:15.975138 Missing Authorization check in a function module in SAP Support Tools Plug-In
MEDIUM (4.3)
Due to missing authorization check in a function module in SAP Support Tools Plug-In, an authenticated attacker could invoke specific function modules to retrieve information about the system and its configuration. This disclosure of the system information could assist the attacker to plan subsequent attacks. This vulnerability has a low impact on the confidentiality of the application, with no effect on its integrity or availability.
Published: 2026-02-10T03:02:03.752Z
Updated: 2026-02-10T18:37:14.643Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0486 vulnerable 2026-06-08 07:47:12.365851 Missing Authorization Check in ABAP based SAP systems
MEDIUM (5)
In ABAP based SAP systems a remote enabled function module does not perform necessary authorization checks for an authenticated user resulting in disclosure of system information.This has low impact on confidentiality. Integrity and availability are not impacted.
Published: 2026-02-10T03:00:59.297Z
Updated: 2026-02-10T15:45:30.862Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.