What’s Vulnerable › Vulnerabilities
CVE-2026-24311: Insecure Storage Protection vulnerability in SAP Customer Checkout 2.0
- Severity: medium (CVSS 5.6 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-03-10 · updated 2026-06-17
- Weakness: CWE-312
Description
The SAP Customer Checkout application exhibits certain design characteristics that involve locally storing operational data using reversible protection mechanisms. Access to this data, combined with user?initiated interaction, may allow modifications to occur without validation. Such changes could affect system behaviour during startup, resulting in a high impact on the application's confidentiality and integrity, with a low impact on availability.
Affected products
- SAP_SE SAP Customer Checkout 2.0: SAP_CUSTOMER_CHECKOUT 2.0
References
Get alerted when CVE-2026-24311 or the next vulnerability affects your stack