Security Advisory

CVE-2026-40134

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-12 02:21:28

Last updated 2026-05-12 13:11:34

Assigner sap

CVSS score 4.3

State PUBLISHED

Description

Due to insufficient authorization checks in the SAP Incentive and Commission Management application, authenticated users could invoke a remote-enabled function module to perform table update operations. This vulnerability has a low impact on integrity with no impact on confidentiality and availability of the application.

← Browse all CVEs View on cve.org ↗