CVE-2019-0243: SAP bw/4hana

High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Under some circumstances, masterdata maintenance in SAP BW/4HANA (fixed in DW4CORE version 1.0 (SP08)) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Affected products

• SAP bw/4hana: version 1.0 only

Published 2019-01-08. Last modified 2026-06-17.