CVE-2026-44764
Received Received - Intake

Missing Authorization Check in SAP Manufacturing Integration and Intelligence

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: SAP SE

Description
Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated attacker could send crafted requests to the Cost Servlet using specific parameter values. If processed by the application, these requests enable access to backend operations. Successful exploitation could allow the attacker to read, create, modify, or delete application-managed business data, resulting in a limited impact on the confidentiality, integrity, and availability of the affected system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2026-44764
EUVD
EUVD-2026-55864

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sap manufacturing_integration_and_intelligence *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Missing Authorization Check in SAP Manufacturing Integration and Intelligence. An unauthenticated attacker can send crafted requests to the Cost Servlet with specific parameters. If processed, these requests allow access to backend operations, enabling read, create, modify, or delete actions on application-managed business data.

Detection Guidance

Detecting this vulnerability requires checking for unauthorized access to the Cost Servlet in SAP Manufacturing Integration and Intelligence. Monitor network traffic for unusual requests to the servlet with specific parameters. Review application logs for unauthorized backend operations or data modifications. Ensure proper authorization checks are enforced in the application configuration.

Impact Analysis

The impact includes potential unauthorized access to sensitive business data, allowing attackers to read, modify, or delete information. This could disrupt system operations, compromise data integrity, and affect system availability, leading to operational and reputational damage.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR's data protection principles or HIPAA's security requirements. Non-compliance may result in legal penalties, fines, or loss of trust due to compromised data confidentiality and integrity.

Mitigation Strategies

Apply the latest security patches from SAP for Manufacturing Integration and Intelligence to address the missing authorization check in the Cost Servlet. Restrict network access to the affected servlet using firewalls or network segmentation. Monitor application logs for unusual requests to the Cost Servlet with specific parameter values.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-44764. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart