CNNVD-202602-1709 Information

CNNVD ID

CNNVD-202602-1709

CVE-2026-0488

  • CNNVD Published: 2026-02-10

Description (Chinese)

SAP CRM和SAP S/4HANA都是德国思爱普(SAP)公司的产品。SAP CRM是一个客户关系管理系统。SAP S/4HANA是一个基于 SAP HANA 内存数据库系统的的企业资源管理软件。 SAP CRM和SAP S/4HANA存在安全漏洞,该漏洞源于通用功能模块调用存在缺陷,可能导致执行任意SQL语句和完全数据库破解。

Description (English)

SAP CRM and SAP S/4HANA are products of SAP Germany. SAP CRM is a customer relationship management system. SAP S/4HANA is an enterprise resource management software based on the SAP HANA memory database system. There is a security loophole between SAP CRM and SAP S/4HANA, which stems from deficiencies in the use of the universal functionality module, which could lead to the implementation of any SQL statement and full database breakdown.

Hazard Level

Low

Vulnerability Type

其他

Affected Vendor

思爱普

Published

2026-02-10

Last Modified

2026-02-24

References

https://url.sap/sapsecuritypatchday https://me.sap.com/notes/3697099 https://access.redhat.com/security/cve/cve-2026-0488

Patch

https://me.sap.com/notes/3697099

Share on: