CVE-2026-0503

🗓️ 13 Jan 2026 01:14:20Reported by sapType

CVE-2026-0503 enables unauthorized access in SAP ECC and S/4HANA EHS, enabling credential extraction.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2026-0503	13 Jan 202605:47	–	circl
CNNVD	SAP ERP Central Component 安全漏洞	13 Jan 202600:00	–	cnnvd
Cvelist	CVE-2026-0503 Missing Authorization check in in SAP ERP Central Component and SAP S/4HANA (SAP EHS Management)	13 Jan 202601:14	–	cvelist
EUVD	EUVD-2026-2381	13 Jan 202601:14	–	euvd
NCSC	Vulnerabilities fixed in SAP products	13 Jan 202614:42	–	ncsc
NVD	CVE-2026-0503	13 Jan 202602:15	–	nvd
Positive Technologies	PT-2026-2338	13 Jan 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-0503	14 Jan 202601:22	–	redhatcve
Vulnrichment	CVE-2026-0503 Missing Authorization check in in SAP ERP Central Component and SAP S/4HANA (SAP EHS Management)	13 Jan 202601:14	–	vulnrichment

Vulners

Node

sap erp_central_componentMatch618

sap s/4hanaMatch618

sap s4coreMatch102

sap erp_central_componentMatch103

sap s/4hanaMatch103

sap erp_central_componentMatch104

sap s/4hanaMatch104

sap erp_central_componentMatch105

sap s/4hanaMatch105

sap erp_central_componentMatch106

sap s/4hanaMatch106

sap erp_central_componentMatch107

sap s/4hanaMatch107

sap erp_central_componentMatch108

sap s/4hanaMatch108

sap erp_central_componentMatch109

sap s/4hanaMatch109

sap erp_central_componentMatch605

sap s/4hanaMatch605

sap erp_central_componentMatch606

sap s/4hanaMatch606

sap erp_central_componentMatch617

sap s/4hanaMatch617

[
  {
    "defaultStatus": "unaffected",
    "product": "SAP ERP Central Component and SAP S/4HANA (SAP EHS Management)",
    "vendor": "SAP_SE",
    "versions": [
      {
        "status": "affected",
        "version": "SAP_APPL 618"
      },
      {
        "status": "affected",
        "version": "S4CORE 102"
      },
      {
        "status": "affected",
        "version": "103"
      },
      {
        "status": "affected",
        "version": "104"
      },
      {
        "status": "affected",
        "version": "105"
      },
      {
        "status": "affected",
        "version": "106"
      },
      {
        "status": "affected",
        "version": "107"
      },
      {
        "status": "affected",
        "version": "108"
      },
      {
        "status": "affected",
        "version": "109"
      },
      {
        "status": "affected",
        "version": "EA-APPL 605"
      },
      {
        "status": "affected",
        "version": "606"
      },
      {
        "status": "affected",
        "version": "617"
      }
    ]
  }
]

Source	Link
me	www.me.sap.com/notes/3681523
url	www.url.sap/sapsecuritypatchday

15 Apr 2026 00:35Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.16.4

EPSS0.00071

SSVC

CWE-862