CVE-2026-89124

MEDIUMCVSS 4.3

Description

Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to access sensitive information beyond their intended authorization scope. This vulnerability has low impact on confidentiality of the data, with no impact on the integrity and availability of the application.

Timeline

Published:October 13th, 2026 1:16 AM

Last modified:October 15th, 2026 8:38 PM

CVSS Scoring

CVSS v3: 4.3 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-863

References & Reports

Advisories, patches, and third-party reports

https://me.sap.com/notes/3810872
https://url.sap/sapsecuritypatchday

Source: NIST NVD · Data may lag official sources by up to one minute