SAP Solution Tools Plug-In vulnerabilities

3 CVEs affecting SAP Solution Tools Plug-In, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-24322, published 2026-02-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-24322, published 2026-02-10. High severity, CVSS 7.7. EPSS: 0.2% chance of exploitation in the next 30 days. SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing sensitive information to be disclosed. This…
CVE-2026-23681, published 2026-02-10. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Due to missing authorization check in a function module in SAP Support Tools Plug-In, an authenticated attacker could invoke specific function modules to retrieve information about the system and its…
CVE-2026-0486, published 2026-02-10. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. In ABAP based SAP systems a remote enabled function module does not perform necessary authorization checks for an authenticated user resulting in disclosure of system information.This has low impact…