Security Advisory

CVE-2026-24312

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-10 03:03:19
Last updated 2026-02-10 17:17:48
Assigner sap
State PUBLISHED

Description

An erroneous authorization check in SAP Business Workflow leads to privilege escalation. An authenticated administrative user can bypass role restrictions by leveraging permissions from a less sensitive function to execute unauthorized, high-privilege actions. This has a high impact on data integrity, with low impact on confidentiality and no impact on availability of the application.