What’s Vulnerable › Vulnerabilities
CVE-2024-45286: Missing Authorization check in SAP Production and Revenue Accounting (Tobin interface)
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-09-10 · updated 2026-06-17
- Weakness: CWE-862
Description
Due to lack of proper authorization checks when calling user, a function module in obsolete Tobin interface in SAP Production and Revenue Accounting allows unauthorized access that could lead to disclosure of highly sensitive data. There is no impact on integrity or availability.
Affected products
- SAP_SE SAP Production and Revenue Accounting (Tobin interface): S4CEXT 106, S4CEXT 107, S4CEXT 108, IS-PRA 605, IS-PRA 606, IS-PRA 616 (+8)
References
Get alerted when CVE-2024-45286 or the next vulnerability affects your stack