VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Feb 10, 2026· Updated Jun 17, 2026

CVE-2026-24327

CVE-2026-24327

Description

Due to missing authorization check in SAP Strategic Enterprise Management (Balanced Scorecard in Business Server Pages), an authenticated attacker could access information that they are otherwise unauthorized to view. This leads to low impact on confidentiality and no effect on integrity or availability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15
  • SAP/Strategic Enterprise Management13 versions
    cpe:2.3:a:sap:strategic_enterprise_management:600:*:*:*:*:*:*:*+ 12 more
    • cpe:2.3:a:sap:strategic_enterprise_management:600:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:strategic_enterprise_management:602:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:strategic_enterprise_management:603:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:strategic_enterprise_management:604:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:strategic_enterprise_management:605:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:strategic_enterprise_management:634:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:strategic_enterprise_management:700:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:strategic_enterprise_management:736:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:strategic_enterprise_management:746:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:strategic_enterprise_management:747:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:strategic_enterprise_management:748:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:strategic_enterprise_management:800:*:*:*:*:*:*:*
    • (no CPE)
  • SAP/Strategic Enterprise Management (Balanced Scorecard in Business Server Pages)cpe-rescue
    Range: SEM-BW 600
  • SAP/Balanced Scorecardllm-create

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.