Remote Function Call module Information Disclosure

The vulnerability of the Remote Function Call module in the SAP Operational Data Provisioning Data Replication API ODP-RFC infrastructure is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause servi...

CVE-2026-44754: Missing Authorization

The Remote Function Call RFC modules of the Operational Data Provisioning Data Replication API ODP-RFC are missing caller identification of permitted SAP-internal applications and are being used by customer or third-party applications in ways that are not aligned with its intended usage. Which...