CVE-2026-44754

Name of the Vulnerable Software and Affected Versions SAP Operational Data Provisioning Data Replication API (affected versions not specified)

Description The Remote Function Call (RFC) modules of the Operational Data Provisioning Data Replication API (ODP-RFC) lack caller identification for permitted SAP-internal applications. This allows customer or third-party applications to use these modules in ways not aligned with their intended purpose, which could lead to the unintended disclosure of data. This issue does not affect data integrity and poses minimal concerns for application availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.