Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_s/4hana_odata_service_(manage_reference_equipment):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap S/4Hana Odata Service (Manage Reference Equipment) (6ce42c8e-93d3-59d4-8faa-7ee91344e724)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-27677 vulnerable 2026-06-08 07:53:22.866603 Missing Authorization check in SAP S/4HANA OData Service (Manage Reference Equipment)
MEDIUM (6.5)
Due to missing authorization checks in the SAP S/4HANA OData Service (Manage Reference Equipment), an attacker could update and delete child entities via OData services without proper authorization. This vulnerability has a high impact on integrity, while confidentiality and availability are not impacted.
Published: 2026-04-14T00:07:22.753Z
Updated: 2026-04-14T13:14:18.498Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.