Mehrere Schwachstellen (CVE-2025-6577, CVE-2026-25786, CVE-2026-25787, CVE-2026-34260) in Enterprise
SAP - SAP S/4hana (SAP Enterprise Search For Abap) - CRITICAL - CVE-2026-34260.
SAP S/4HANA, specifically its Enterprise Search for ABAP component, is vulnerable to a SQL injection flaw. This security issue allows an authenticated attacker to manipulate SQL queries by injecting malicious statements through user input. Due to improper validation and sanitization, exploited vulnerabilities can lead to unauthorized access to sensitive database information, potentially compromising data confidentiality and application availability. Organizations using affected versions should apply the necessary patches and implement security measures to mitigate risks associated with this vulnerability.
Quelle: securityvulnerability.io