CVE-2026-24310EPSS p9.1%

CVE-2026-24310CVE-2026-24310

sap / netweaver_application_server_abap

Description

Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module and read the sensitive information from database catalog of the ABAP system. This vulnerability has low impact on the application's confidentiality with no effect on the integrity and availability.

Scoring

CVSS 3.5 ()
VectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N
EPSS0.19% probability of exploitation · percentile 9.1% · 2026-06-19T12:03:05Z
Last modified2026-06-03

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-24309
CVE
CVE-2025-0063
CVE
CVE-2026-27688
CVE
CVE-2026-0509
CVE
CVE-2026-0506
CVE
CVE-2025-0070
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.