Vulnerability Details CVE-2026-24322
SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing sensitive information to be disclosed. This vulnerability has a high impact on confidentiality and does not affect integrity or availability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 8.6%
CVSS Severity
CVSS v3 Score 7.7
Products affected by CVE-2026-24322
-
cpe:2.3:a:sap:solution_tools_plug-in:2008_1_700
-
cpe:2.3:a:sap:solution_tools_plug-in:2008_1_710
-
cpe:2.3:a:sap:solution_tools_plug-in:740
-
cpe:2.3:a:sap:solution_tools_plug-in:758