CVE-2026-109808
Missing Authorisation Check in SAP Solution Tools Plug-In (ST-PI)
CVSS Score
3.1
EPSS Score
0.0%
EPSS Percentile
0th
Due to a missing authorization check in certain remote-enabled functionality, SAP Solution Tools Plug-In allows an authenticated attacker to invoke this functionality to access data that would otherwise be restricted. Exploitation is only possible under certain conditions, as the attacker must have prior knowledge of specific internal identifiers to successfully target the affected functionality. Successful exploitation could allow the attacker to read sensitive information, resulting in a low impact on confidentiality. There is no impact on integrity and availability.
| Vendor | sap_se |
| Product | sap solution tools plug-in (st-pi) |
| Published | Nov 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for sap_se sap solution tools plug-in (st-pi)
Be the first to know when new low vulnerabilities affecting sap_se sap solution tools plug-in (st-pi) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N Attack Vector
Network
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Affected Versions
SAP_SE / SAP Solution Tools Plug-In (ST-PI)
ST-PI 2008_1_700 2008_1_710 740 758