CVE-2026-24327
MEDIUMSAP Strategic Enterprise Management - Info Disclosure
Title source: llmDescription
Due to missing authorization check in SAP Strategic Enterprise Management (Balanced Scorecard in Business Server Pages), an authenticated attacker could access information that they are otherwise unauthorized to view. This leads to low impact on confidentiality and no effect on integrity or availability.
Scores
CVSS v3
4.3
EPSS
0.0001
EPSS Percentile
1.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Classification
CWE
CWE-862
Status
published
Affected Products (12)
sap/strategic_enterprise_management
sap/strategic_enterprise_management
sap/strategic_enterprise_management
sap/strategic_enterprise_management
sap/strategic_enterprise_management
sap/strategic_enterprise_management
sap/strategic_enterprise_management
sap/strategic_enterprise_management
sap/strategic_enterprise_management
sap/strategic_enterprise_management
sap/strategic_enterprise_management
sap/strategic_enterprise_management
Timeline
Published
Feb 10, 2026
Tracked Since
Feb 18, 2026