CVE-2026-44769

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 46/100
Published: 2026-07-14 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Network No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Network
AC: High
PR: High
UI: None
S: Unchanged
C: High
I: Low
A: Low

Description

SAP S/4HANA application Project Management (PPM-PRO) allows an attacker with high privileges to execute crafted database queries, exposing the backend database. This results in low impact on confidentiality, with no impact on integrity and availability of the application.

Weakness Classification (1)

Bug Bounty Relevance

46 / 100
✓ Network accessible
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:L

EPSS — Exploitation Probability

0.31%
Raw Score 0.003080
Percentile 23.6%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00308
2026-10-28
0.00308

Intelligence Sources

nvd ref →