CVE-2026-24311
Received Received - Intake

Insecure Data Modification in SAP Customer Checkout Affecting Confidentiality

Publication date: 2026-03-10

Last updated on: 2026-03-10

Assigner: SAP SE

Description
The SAP Customer Checkout application exhibits certain design characteristics that involve locally storing operational data using reversible protection mechanisms. Access to this data, combined with user?initiated interaction, may allow modifications to occur without validation. Such changes could affect system behaviour during startup, resulting in a high impact on the application's confidentiality and integrity, with a low impact on availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-03-10
Last Modified
2026-03-10
Generated
2026-07-06
AI Q&A
2026-03-10
EPSS Evaluated
2026-07-05
NVD
CVE-2026-24311
EUVD
EUVD-2026-10446

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sap customer_checkout *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-312 The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The vulnerability in the SAP Customer Checkout application involves the local storage of operational data using reversible protection mechanisms. This means that the data stored locally can be accessed and potentially modified by a user. When a user interacts with the system, these modifications can occur without proper validation, which may lead to changes in the system's behavior during startup.

Impact Analysis

This vulnerability can have a high impact on the confidentiality and integrity of the SAP Customer Checkout application. Unauthorized modifications to operational data could alter system behavior, potentially leading to compromised data confidentiality and integrity. The impact on availability is considered low.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-24311. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart