CVE-2026-44769: SAP SE SAP s/4hana Project Management Ppm-Pro

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

SAP S/4HANA application Project Management (PPM-PRO) allows an attacker with high privileges to execute crafted database queries, exposing the backend database. This results in low impact on confidentiality, with no impact on integrity and availability of the application.

Affected products

• SAP SE SAP s/4hana Project Management Ppm-Pro: version 602 only; version 603 only; version 604 only; version 605 only; version 606 only; version 617 only; …

Published 2026-07-14. Last modified 2026-07-14.