CVE-2024-45286: SAP SE SAP Production And Revenue Accounting Tobin Interface

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Due to lack of proper authorization checks when calling user, a function module in obsolete Tobin interface in SAP Production and Revenue Accounting allows unauthorized access that could lead to disclosure of highly sensitive data. There is no impact on integrity or availability.

Affected products

• SAP SE SAP Production And Revenue Accounting Tobin Interface: version S4CEXT 106 only; version S4CEXT 107 only; version S4CEXT 108 only

Published 2024-09-10. Last modified 2026-06-17.