PT-2026-32570

CVE-2026-34264

·

Published

2026-04-14

·

Updated

2026-05-04

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:L/Au:S/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions SAP Human Capital Management for SAP S/4HANA (affected versions not specified)
Description During authorization checks, the system returns specific messages that allow an authenticated user with low privileges to guess and enumerate content beyond their authorized scope. This results in the disclosure of sensitive information, impacting confidentiality.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾