CVE-2026-109808

The SAP Solution Tools Plug-In is vulnerable to a missing authorization check in certain remote-enabled functionality. An authenticated attacker can invoke this functionality to access restricted data, provided they have prior knowledge of specific internal identifiers. Successful exploitation al...

CVE-2026-24313: Missing Authorization

SAP Solution Tools Plug-In ST-PI contains a function module that does not perform the necessary authorization checks for authenticated users, allowing system information to be disclosed. This vulnerability has a low impact on confidentiality and does not affect integrity or availability...

CVE-2026-24322: Missing Authorization

SAP Solution Tools Plug-In ST-PI contains a function module that does not perform the necessary authorization checks for authenticated users, allowing sensitive information to be disclosed. This vulnerability has a high impact on confidentiality and does not affect integrity or availability...