CVE-2026-0488
Estado: AnalizadaCrítica (9.9)—
An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a generic function module call and execute unauthorized critical functionalities, which includes the ability to execute an arbitrary SQL statement. This leads to a full database compromise with high impact on confidentiality, integrity, and availability.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Puntuación base: 9.9
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.52%
- Percentil entre todas las CVEs puntuadas: 42
- Fecha de la puntuación: 4/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
🎯 Técnicas ATT&CK
Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.
- Explotación
T1210Exploitation of Remote Serviceslateral movement85 % - Impacto secundario
T1565.001Stored Data Manipulationimpact70 %
AV:N + PR:L sin UI:R indica acceso remoto autenticado (T1210). El módulo vulnerable permite ejecución SQL arbitraria y compromiso total de BD (T1078.001 acceso a BD, T1059.004 ejecución de comandos SQL, T1565.001 manipulación de datos).
Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.
🛡️ Mitigaciones ATT&CK que cubren estas técnicas
Tecnologías afectadas (3)
CWE
- CWE-862
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2026-0488",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-0488",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2026-02-11T04:56:12.805253Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "cna@sap.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 9.9,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 6,
"exploitabilityScore": 3.1
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 9.9,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 6,
"exploitabilityScore": 3.1
}
]
},
"affected": [
{
"source": "cna@sap.com",
"affectedData": [
{
"vendor": "SAP_SE",
"product": "SAP CRM and SAP S/4HANA (Scripting Editor)",
"versions": [
{
"status": "affected",
"version": "S4FND 102"
},
{
"status": "affected",
"version": "103"
},
{
"status": "affected",
"version": "104"
},
{
"status": "affected",
"version": "105"
},
{
"status": "affected",
"version": "106"
},
{
"status": "affected",
"version": "107"
},
{
"status": "affected",
"version": "108"
},
{
"status": "affected",
"version": "109"
},
{
"status": "affected",
"version": "SAP_ABA 700"
},
{
"status": "affected",
"version": "WEBCUIF 700"
},
{
"status": "affected",
"version": "701"
},
{
"status": "affected",
"version": "730"
},
{
"status": "affected",
"version": "731"
},
{
"status": "affected",
"version": "746"
},
{
"status": "affected",
"version": "747"
},
{
"status": "affected",
"version": "748"
},
{
"status": "affected",
"version": "800"
},
{
"status": "affected",
"version": "801"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2026-02-10T04:16:01.710",
"references": [
{
"url": "https://me.sap.com/notes/3697099",
"tags": [
"Permissions Required"
],
"source": "cna@sap.com"
},
{
"url": "https://url.sap/sapsecuritypatchday",
"tags": [
"Vendor Advisory"
],
"source": "cna@sap.com"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "cna@sap.com",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a generic function module call and execute unauthorized critical functionalities, which includes the ability to execute an arbitrary SQL statement. This leads to a full database compromise with high impact on confidentiality, integrity, and availability."
},
{
"lang": "es",
"value": "Un atacante autenticado en SAP CRM y SAP S/4HANA (Editor de scripts) podría explotar una vulnerabilidad en una llamada a un módulo de función genérico y ejecutar funcionalidades críticas no autorizadas, lo que incluye la capacidad de ejecutar una sentencia SQL arbitraria. Esto conduce a un compromiso total de la base de datos con alto impacto en la confidencialidad, integridad y disponibilidad."
}
],
"lastModified": "2026-06-17T10:10:49.897",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5A3C915-0E5F-4B1A-B1EB-5ADEA517F620"
},
{
"criteria": "cpe:2.3:a:sap:s\\/4hana:102:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55BACB30-A607-410E-AB05-E991CC19CE12"
},
{
"criteria": "cpe:2.3:a:sap:s\\/4hana:103:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95A0C742-4CBD-46B8-B2B3-5949EFC82A6D"
},
{
"criteria": "cpe:2.3:a:sap:s\\/4hana:104:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "14A540DA-F234-4EEA-ADE8-4F6306A86C1E"
},
{
"criteria": "cpe:2.3:a:sap:s\\/4hana:105:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "088EF501-76F9-44EC-B8B9-AED6F6096C03"
},
{
"criteria": "cpe:2.3:a:sap:s\\/4hana:106:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0023602-B509-4B20-9B29-20EEE88E1692"
},
{
"criteria": "cpe:2.3:a:sap:s\\/4hana:107:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "489A03BA-B2B1-4271-9A0B-B514051807DF"
},
{
"criteria": "cpe:2.3:a:sap:s\\/4hana:108:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "527C39A2-8777-4334-B4D4-A738442A0FB9"
},
{
"criteria": "cpe:2.3:a:sap:s\\/4hana:109:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA935EBA-7508-4993-B07A-48EBFB267914"
},
{
"criteria": "cpe:2.3:a:sap:webclient_ui_framework:700:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E58BF28-5CE1-47C3-8DE3-72BEA73DC3B7"
},
{
"criteria": "cpe:2.3:a:sap:webclient_ui_framework:701:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FFE1D9D8-4942-4F90-AE5C-D82A01917F9D"
},
{
"criteria": "cpe:2.3:a:sap:webclient_ui_framework:730:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2CC76B6-E96D-42E1-8EA4-38BBBDD1DE2A"
},
{
"criteria": "cpe:2.3:a:sap:webclient_ui_framework:731:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC693B01-4B67-4A72-A6CB-F090FF95A99B"
},
{
"criteria": "cpe:2.3:a:sap:webclient_ui_framework:746:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3DF2127-D217-432B-AD0A-3A83DEAA3B04"
},
{
"criteria": "cpe:2.3:a:sap:webclient_ui_framework:747:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F58D83D4-822A-42FC-841E-43A174AECE85"
},
{
"criteria": "cpe:2.3:a:sap:webclient_ui_framework:748:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "808207D6-794F-4D38-9E22-233A1E584F75"
},
{
"criteria": "cpe:2.3:a:sap:webclient_ui_framework:800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B6E6ECF-6417-4B17-AAB8-1B8D7DB222C7"
},
{
"criteria": "cpe:2.3:a:sap:webclient_ui_framework:801:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD4F358E-8664-41BE-83B6-5A81FC974F4F"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cna@sap.com"
}