CVE-2026-24327: SAP Strategic Enterprise Management

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Due to missing authorization check in SAP Strategic Enterprise Management (Balanced Scorecard in Business Server Pages), an authenticated attacker could access information that they are otherwise unauthorized to view. This leads to low impact on confidentiality and no effect on integrity or availability.

Affected products

• SAP Strategic Enterprise Management: version 600 only; version 602 only; version 603 only; version 604 only; version 605 only; version 634 only; …

Published 2026-02-10. Last modified 2026-06-17.