Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_s/4hana_odata_service_(manage_technical_object_structures):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap S/4Hana Odata Service (Manage Technical Object Structures) (d9584449-d8d7-5299-a6bf-e783ee9267aa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-27676 vulnerable 2026-06-08 07:53:22.865617 Missing Authorization check in SAP S/4HANA OData Service (Manage Technical Object Structures)
MEDIUM (4.3)
Due to missing authorization checks in the SAP S/4HANA OData Service (Manage Technical Object Structures), an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability results in a low impact on integrity, while confidentiality and availability are not impacted.
Published: 2026-04-14T00:07:12.657Z
Updated: 2026-04-14T13:14:18.632Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.