CVE-2026-24322

HIGH

SAP ST-PI - Info Disclosure

Title source: llm

Description

SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing sensitive information to be disclosed. This vulnerability has a high impact on confidentiality and does not affect integrity or availability.

References (2)

[Permissions Required] https://me.sap.com/notes/3705882

[Vendor Advisory] https://url.sap/sapsecuritypatchday

Scores

CVSS v3 7.7

EPSS 0.0003

EPSS Percentile 9.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Classification

CWE

CWE-862

Status published

Affected Products (4)

sap/solution_tools_plug-in

Timeline

Published Feb 10, 2026

Tracked Since Feb 18, 2026